strange error

I get following error before logging into ispconfig.
sometimes I can log in sometimes not

Warning: session_start() [function.session-start]: open(/tmp/sess_1ae21f7ce33b4d56aa1af32a95e15334, O_RDWR) failed: Read-only file system (30) in /home/admispconfig/ispconfig/web/login.php on line 29

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/admispconfig/ispconfig/web/login.php:29) in /home/admispconfig/ispconfig/web/login.php on line 29

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/admispconfig/ispconfig/web/login.php:29) in /home/admispconfig/ispconfig/web/login.php on line 29

 

strange..

It's a xen domU
The tmp is writable

problem now is that I can not ping to domain names.
maybe this is related.
ping ip works, domainname not.
I am now looking for a dns server error..

 

ai

When I stop bastille I can ping domains!!

 

bastille error

looked with debconf and iptables is added???
any idea?

/etc/init.d/bastille-firewall start
iptables v1.2.11: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.2.11: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FATAL: Module ip_conntrack not found.
FATAL: Module ip_conntrack_ftp not found.
FATAL: Module ipt_LOG not found.
Setting up IP spoofing protection... done.
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
Allowing traffic from trusted interfaces... done.
Setting up chains for public/internal interface traffic... done.
Setting up general rules... done.
Setting up outbound rules... done.
touch: cannot touch `/var/lock/subsys/bastille-firewall': No such file or directory

 

problem returns

If I restart ispconfig the problem with the session() start warning is solved
but returns...

 

Have a look here: http://www.howtoforge.com/perfect_xen_setup_debian_ubuntu

The pre-compiled Xen binaries do not have iptables support. If you need iptables support, you have to compile Xen from the sources.

 

xen

I compiled the domU with the manual and even the config file.
and the command iptables -L -n gives no errors.

Do you also need to compile iptables on the domO?


thanks and greetings

Raymond