Subject: Help with net_raw / ping needed
From: Thomas Westlund <thomas@westlund.no>
Date: Fri, 19 Oct 2007 16:14:30 +0200

Hi,

Im running vserver on a debian etch (with backports enabled) server and I'm 
trying to run asterisk in an vserver.

My kernel version is: 2.6.22-2-vserver-686, and util-vserver is the newest 
version available via apt-get: util-vserver 0.30.214

Asterisk seemingly works fine, but has trouble sending udp packets, I get the 
following error from asterisk:

[Oct 19 16:11:55] ERROR[6922]: rtp.c:2393 ast_rtcp_write_sr: RTCP SR 
transmission error to xxx.xxx.xxx.xxx:9112, rtcp halted Operation not 
permitted

I have tried adding the following to my guest config

/etc/vserver/guest/ccapabilities: 
RAW_ICMP
/etc/vserver/guest/bcapabilities: 
NET_RAW
SYS_NICE

But they do not seem to have any effect.

I'm also not able to ping from the guest (I can ping local, but not remote 
adressses):

guest:/# ping www.google.com
PING www.l.google.com (64.233.183.99) 56(84) bytes of data.
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted

I believe these to problems are related.

Any help is apreciated

-- 
Thomas Westlund