Issue in Installing csf in cPanel

[NaveenT20]

Hi,

I got the following error while installing csf. Kindly advice.

#perl /usr/local/csf/bin/csftest.pl
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...FAILED [FATAL Error: iptables: No chain/target/match by that name.] - Required for csf to function
Testing ipt_limit/xt_limit...OK
Testing ipt_recent...OK
Testing xt_connlimit...FAILED [Error: iptables: No chain/target/match by that name.] - Required for CONNLIMIT feature
Testing ipt_owner/xt_owner...OK
Testing iptable_nat/ipt_REDIRECT...FAILED [Error: iptables v1.4.7: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)] - Required for MESSENGER feature
Testing iptable_nat/ipt_DNAT...FAILED [Error: iptables v1.4.7: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)] - Required for csf.redirect feature

RESULT: csf will not function on this server due to FATAL errors from missing modules [1]

SERVER DETAILS :

/etc/redhat-release:CentOS release 6.7 (Final)
/usr/local/cpanel/version:11.52.0.22
/var/cpanel/envtype:standard
CPANEL=release
Server version: Apache/2.4.16 (Unix)
Server built:   Nov  2 2015 22:01:27
Cpanel::Easy::Apache v3.32.4 rev9999
PHP 5.5.30 (cgi-fcgi) (built: Nov  2 2015 22:07:19)
Copyright (c) 1997-2015 The PHP Group
Zend Engine v2.5.0, Copyright (c) 1998-2015 Zend Technologies
mysql  Ver 14.14 Distrib 5.5.46, for Linux (x86_64) using readline 5.1
Kernel Version : 2.6.32-358.el6.x86_64

Note : I have a root privilege.

Thanks.

 

[24x7server]

Hello ,

You are facing this issues because of iptables modules. As some iptables modules are not enable on your server. You will have to enable following modules on your server. If this server is openvz vm then you will have to enable these modules on your host node and for that you will have to contact your vps provider.

modprobe iptables_module
modprobe ipt_helper
modprobe ipt_REDIRECT
modprobe ipt_TCPMSS
modprobe ipt_LOG
modprobe ipt_TOS
modprobe iptable_nat
modprobe ipt_length
modprobe ipt_tcpmss
modprobe iptable_mangle
modprobe ipt_tos
modprobe iptable_filter
modprobe ipt_helper
modprobe ipt_tos
modprobe ipt_ttl
modprobe ipt_SAME
modprobe ipt_REJECT
modprobe ipt_helper
modprobe ipt_owner
modprobe ip_tables
modprobe ipt_MASQUERADE
modprobe ipt_multiport/xt_multiport
modprobe ipt_state/xt_state
modprobe ipt_limit/xt_limit
modprobe ipt_recent
modprobe xt_connlimit
modprobe ipt_owner/xt_owner
modprobe iptable_nat/ipt_DNAT
modprobe iptable_nat/ipt_REDIRECT

 

[NaveenT20]

Hi,
First of all thanks for your suggestions.

Yes, you are right. Previously the openvz is installed in the server. But its uninstalled.

OUTPUT :
#vzlist -a
-bash: vzlist: command not found

Getting error while installing some modules. Please provide reference links to fix these issues if any.

1. modprobe iptables_module
<Error message> FATAL: Module iptables_module not found.
2. modprobe ipt_helper
<Error message> FATAL: Error inserting xt_helper (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/netfilter/xt_helper.ko): Unknown symbol in module, or unknown parameter (see dmesg)
3. modprobe ipt_REDIRECT
<Error message> WARNING: Error inserting nf_conntrack_ipv4 (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/nf_conntrack_ipv4.ko): Unknown symbol in module, or unknown parameter (see dmesg)
WARNING: Error inserting nf_nat (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/nf_nat.ko): Unknown symbol in module, or unknown parameter (see dmesg)
FATAL: Error inserting ipt_REDIRECT (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/ipt_REDIRECT.ko): Unknown symbol in module, or unknown parameter (see dmesg)
4. modprobe iptable_nat
<Error message> WARNING: Error inserting nf_conntrack_ipv4 (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/nf_conntrack_ipv4.ko): Unknown symbol in module, or unknown parameter (see dmesg)
WARNING: Error inserting nf_nat (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/nf_nat.ko): Unknown symbol in module, or unknown parameter (see dmesg)
WARNING: Error inserting ip_tables (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/ip_tables.ko): Unknown symbol in module, or unknown parameter (see dmesg)
FATAL: Error inserting iptable_nat (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/iptable_nat.ko): Unknown symbol in module, or unknown parameter (see dmesg)
5. modprobe ipt_helper
FATAL: Error inserting xt_helper (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/netfilter/xt_helper.ko): Unknown symbol in module, or unknown parameter (see dmesg)
6. modprobe ipt_SAME
FATAL: Module ipt_SAME not found.
7. modprobe ipt_helper
FATAL: Error inserting xt_helper (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/netfilter/xt_helper.ko): Unknown symbol in module, or unknown parameter (see dmesg)
8. modprobe ipt_MASQUERADE
WARNING: Error inserting nf_defrag_ipv4 (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/nf_defrag_ipv4.ko): Unknown symbol in module, or unknown parameter (see dmesg)
WARNING: Error inserting nf_conntrack_ipv4 (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/nf_conntrack_ipv4.ko): Unknown symbol in module, or unknown parameter (see dmesg)
WARNING: Error inserting nf_nat (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/nf_nat.ko): Unknown symbol in module, or unknown parameter (see dmesg)
FATAL: Error inserting ipt_MASQUERADE (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/ipv4/netfilter/ipt_MASQUERADE.ko): Unknown symbol in module, or unknown parameter (see dmesg)
9. modprobe ipt_multiport/xt_multiport
FATAL: Module ipt_multiport/xt_multiport not found.
10. modprobe ipt_state/xt_state
FATAL: Module ipt_state/xt_state not found.
11. modprobe ipt_limit/xt_limit
FATAL: Module ipt_limit/xt_limit not found.
12. modprobe xt_connlimit
FATAL: Error inserting xt_connlimit (/lib/modules/2.6.32-358.el6.x86_64/kernel/net/netfilter/xt_connlimit.ko): Unknown symbol in module, or unknown parameter (see dmesg)
13. modprobe ipt_owner/xt_owner
FATAL: Module ipt_owner/xt_owner not found.
14. modprobe iptable_nat/ipt_DNAT
FATAL: Module iptable_nat/ipt_DNAT not found.
15. modprobe iptable_nat/ipt_REDIRECT
FATAL: Module iptable_nat/ipt_REDIRECT not found.

Thanks in advance.

 

[cPanelMichael]

Previously the openvz is installed in the server. But its uninstalled.

Hello

This could be the reason for the error messages. Is the server already active with accounts? If not, it might be a good idea to reinstall cPanel on a fresh instance of CentOS.

Thank you.

 

[NaveenT20]

Hi,

Thanks for your advice, Is there any other ways to troubleshoot this issue ? because We have one active account on the server.

Thank you.

 

[cPanelMichael]

Yes, you are right. Previously the openvz is installed in the server. But its uninstalled.

To confirm, is this a dedicated server or a VPS?

Thank you.

 

[NaveenT20]

Hi,

It is a dedicated server.

Thanks.

 

[cPanelMichael]

You may find the following third-party URL helpful:

install iptables_nat module on centos 6.4

Thank you.

 

[NaveenT20]

Hi,

Let me try this and get back to you.

Thanks in advance.

 

[NaveenT20]

Hi,

I have referred the given link. Please find the below outputs. Kindly advice.

#cat /proc/sys/net/ipv4/ip_forward
1
#lsmod | grep iptable
iptable_mangle 3349 0
iptable_filter 2793 1
ip_tables 17831 2 iptable_mangle,iptable_filter

Thanks in advance.

 

[NaveenT20]

Hi,

Still the issue persist. Is there any way to fix this issue without reinstalling the C-panel?

Thanks in advance.

 

[cPanelMichael]

I'm not sure that is possible if you have previously installed OpenVZ. I suggest reinstalling the OS and then reinstalling cPanel if possible.

Thank you.

 

[NaveenT20]

Hi Michael,

I have reinstalled the OS and cPanel and the issue is fixed now. Thanks for your support.

Cheers,
Naveen.

 

[cPanelMichael]

I am happy to see the issue is now resolved. Thank you for updating us with the outcome.