CSF на OpenVZ не подгружаются модули ip_tables

## IPv4 iptables kernel modules to be enabled in CTs by default
IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length"

[root@file ~]# iptables -A INPUT -p tcp -m connlimit --connlimit-above 5 --dport 80 -j DROP
[root@file ~]# iptables -L -v -n
Chain INPUT (policy ACCEPT 7 packets, 488 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           #conn/32 > 5 tcp dpt:80

vzctl enter 101	
entered into CT 101
root@localhost:/# iptables -A INPUT -p tcp -m connlimit --connlimit-above 5 --dport 80 -j DROP
root@localhost:/# iptables -L -v -n
Chain INPUT (policy ACCEPT 18 packets, 3861 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           #conn/32 > 5 tcp dpt:80

poiuty:
логи смотрите
и вообще, зачем вы экспериментируете на рабочем сервере?

2013-01-22T20:22:06+0100 vzctl : CT 111 : Stopping container ...
2013-01-22T20:22:09+0100 vzctl : CT 111 : Child 15353 exited with status 7
2013-01-22T20:22:09+0100 vzctl : CT 111 : Killing container ...
2013-01-22T20:22:12+0100 vzctl : CT 111 : Child 15355 exited with status 7
2013-01-22T20:22:12+0100 vzctl : CT 111 : Unable to stop container
2013-01-22T20:22:25+0100 vzctl : CT 1111 : Container config file does not exist
2013-01-22T20:22:32+0100 vzctl : CT 111 : Restarting container
2013-01-22T20:22:32+0100 vzctl : CT 111 : Stopping container ...
2013-01-22T20:22:35+0100 vzctl : CT 111 : Child 15372 exited with status 7
2013-01-22T20:22:35+0100 vzctl : CT 111 : Killing container ...
2013-01-22T20:22:38+0100 vzctl : CT 111 : Child 15374 exited with status 7
2013-01-22T20:22:38+0100 vzctl : CT 111 : Unable to stop container
2013-01-22T20:22:53+0100 vzctl : CT 101 : Setting CPU limit: 0
2013-01-22T20:22:53+0100 vzctl : CT 101 : Setting CPU units: 2000
2013-01-22T20:22:53+0100 vzctl : CT 101 : WARNING: Settings were not saved to config and will be lost after CT restart (use --save flag)
2013-01-22T20:22:53+0100 vzctl : CT 111 : Setting CPU limit: 0
2013-01-22T20:22:53+0100 vzctl : CT 111 : Setting CPU units: 2000
2013-01-22T20:22:53+0100 vzctl : CT 111 : WARNING: Settings were not saved to config and will be lost after CT restart (use --save flag)
2013-01-22T20:22:53+0100 vzctl : CT 111 : Setting up checkpoint...
2013-01-22T20:22:53+0100 vzctl : CT 101 : Setting up checkpoint...
2013-01-22T23:22:53+0400 vzctl : CT 101 : suspend...
2013-01-22T23:22:53+0400 vzctl : CT 111 : suspend...
2013-01-22T23:22:53+0400 vzctl : CT 111 : Can not suspend container: No such process
2013-01-22T20:22:53+0100 vzctl : CT 111 : Checkpointing failed
2013-01-22T23:22:53+0400 vzctl : CT 101 : dump...
2013-01-22T23:22:55+0400 vzctl : CT 101 : kill...
2013-01-22T20:22:55+0100 vzctl : CT 101 : Checkpointing completed successfully
2013-01-22T20:22:56+0100 vzctl : CT 101 : CT is not mounted
2013-01-22T20:22:56+0100 vzctl : CT 111 : Setting up checkpoint...
2013-01-22T23:22:56+0400 vzctl : CT 111 : suspend...
2013-01-22T23:22:56+0400 vzctl : CT 111 : Can not suspend container: No such process
2013-01-22T20:22:56+0100 vzctl : CT 111 : Checkpointing failed
2013-01-22T20:22:56+0100 vzctl : CT 111 : Setting up checkpoint...
2013-01-22T23:22:56+0400 vzctl : CT 111 : suspend...
2013-01-22T23:22:56+0400 vzctl : CT 111 : Can not suspend container: No such process
2013-01-22T20:22:56+0100 vzctl : CT 111 : Checkpointing failed
2013-01-22T20:22:56+0100 vzctl : CT 111 : Setting CPU limit: 0
2013-01-22T20:22:56+0100 vzctl : CT 111 : WARNING: Settings were not saved to config and will be lost after CT restart (use --save flag)
2013-01-22T20:22:56+0100 vzctl : CT 111 : Stopping container ...
2013-01-22T20:22:56+0100 vzctl : CT 101 : Container is unmounted
2013-01-22T20:22:59+0100 vzctl : CT 111 : Child 15525 exited with status 7
2013-01-22T20:22:59+0100 vzctl : CT 111 : Killing container ...
2013-01-22T20:23:02+0100 vzctl : CT 111 : Child 15533 exited with status 7
2013-01-22T20:23:02+0100 vzctl : CT 111 : Unable to stop container
2013-01-22T20:23:02+0100 vzctl : CT 111 : Setting CPU limit: 0
2013-01-22T20:23:02+0100 vzctl : CT 111 : WARNING: Settings were not saved to config and will be lost after CT restart (use --save flag)
2013-01-22T20:23:02+0100 vzctl : CT 111 : Stopping container ...
2013-01-22T20:23:05+0100 vzctl : CT 111 : Child 15537 exited with status 7
2013-01-22T20:23:05+0100 vzctl : CT 111 : Killing container ...
2013-01-22T20:23:08+0100 vzctl : CT 111 : Child 15538 exited with status 7
2013-01-22T20:23:08+0100 vzctl : CT 111 : Unable to stop container
2013-01-22T20:23:08+0100 vzctl : CT 111 : Setting CPU limit: 0
2013-01-22T20:23:08+0100 vzctl : CT 111 : WARNING: Settings were not saved to config and will be lost after CT restart (use --save flag)
2013-01-22T20:23:08+0100 vzctl : CT 111 : Stopping container ...
2013-01-22T20:23:11+0100 vzctl : CT 111 : Child 15542 exited with status 7
2013-01-22T20:23:11+0100 vzctl : CT 111 : Killing container ...
2013-01-22T20:23:14+0100 vzctl : CT 111 : Child 15543 exited with status 7
2013-01-22T20:23:14+0100 vzctl : CT 111 : Unable to stop container
2013-01-22T20:25:52+0100 vzeventd : Started
2013-01-22T20:25:52+0100 vzctl : Setting CPU units: 1000
2013-01-22T20:25:52+0100 vzctl : WARNING: Settings were not saved to config and will be lost after CT restart (use --save flag)
2013-01-22T20:25:52+0100 vzctl : CT 101 : Dump file /var/lib/vz/dump/Dump.101 exists, trying to restore from it
2013-01-22T20:25:52+0100 vzctl : CT 101 : Restoring container ...
2013-01-22T20:25:52+0100 vzctl : CT 101 : Container is mounted
2013-01-22T20:25:53+0100 vzctl : CT 101 : Adding IP address(es): 95.211.131.205
2013-01-22T20:25:54+0100 vzctl : CT 101 : Setting CPU units: 1000
2013-01-22T20:25:54+0100 vzctl : CT 101 : Container restore failed
2013-01-22T20:25:54+0100 vzctl : CT 101 : Killing container ...
2013-01-22T20:25:55+0100 vzctl : CT 101 : Locked by: pid 1458, cmdline /usr/sbin/vzctl start 101
2013-01-22T20:25:55+0100 vzctl : CT 101 : Container already locked
2013-01-22T20:25:56+0100 vzctl : CT 101 : Container was stopped
2013-01-22T20:25:56+0100 vzctl : CT 101 : Starting container...
2013-01-22T20:25:56+0100 vzctl : CT 101 : Adding IP address(es): 95.211.131.205
2013-01-22T20:25:57+0100 vzctl : CT 101 : Setting CPU units: 1000
2013-01-22T20:25:58+0100 vzctl : CT 101 : Container start in progress...
2013-01-22T20:25:58+0100 vzctl : CT 111 : Starting container...
2013-01-22T20:27:46+0100 vzctl : CT 111 : Container is mounted
2013-01-22T20:27:46+0100 vzctl : CT 111 : Adding IP address(es): 82.192.91.72
2013-01-22T20:27:48+0100 vzctl : CT 111 : Setting CPU units: 1000
2013-01-22T20:27:48+0100 vzctl : CT 111 : Container start in progress...

sstyle:
нет мыслей что с этим можно поделать?

2013-01-22T20:25:56+0100 vzctl : CT 101 : Starting container...
2013-01-22T20:25:56+0100 vzctl : CT 101 : Adding IP address(es): 95.211.131.205
2013-01-22T20:25:57+0100 vzctl : CT 101 : Setting CPU units: 1000
2013-01-22T20:25:58+0100 vzctl : CT 101 : Container start in progress...

2013-01-22T20:25:58+0100 vzctl : CT 111 : Starting container...
2013-01-22T20:27:46+0100 vzctl : CT 111 : Container is mounted
2013-01-22T20:27:46+0100 vzctl : CT 111 : Adding IP address(es): 82.192.91.72
2013-01-22T20:27:48+0100 vzctl : CT 111 : Setting CPU units: 1000
2013-01-22T20:27:48+0100 vzctl : CT 111 : Container start in progress...