問題1: 當 apt-get 安裝東西後

insserv: can not symlink(../init.d/vzquota, ../rc2.d/S02vzquota): File exists
insserv: can not symlink(../init.d/vzquota, ../rc3.d/S02vzquota): File exists
insserv: can not symlink(../init.d/vzquota, ../rc4.d/S02vzquota): File exists
insserv: can not symlink(../init.d/vzquota, ../rc5.d/S02vzquota): File exists

修改

/etc/init.d/vzquota

把

# Required-Start: $local_fs $time $syslog
# Required-Stop: $local_fs

改成

# Required-Start: $all
# Required-Stop: $all

問題:

在 firewall 上用此 rule 會出事

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp -s 192.168.123.21 --dport 22 -m state --state NEW -j ACCEPT
iptables -A INPUT -j DROP

因為 default iptable 上是沒有 ip_conntrack 的 !!