IpTables errors

[yeshuawatso]

Can anyone tell me why this rule would spit out an error:

/sbin/iptables -t nat -I PREROUTING -p tcp --dport 2525 -j REDIRECT --to-port 25
iptables: No chain/target/match by that name

This is a normal VPS server on Parallels connected directly to the net, but I'm not sure how to debug this one. The information I've seen elsewhere on the net doesn't seem to help either.

I would give out more information, but I'm not sure what would help.

Thanks,
Yeshua

[yeshuawatso]

Wait, the iptables version might help.

iptables v1.3.8

[Lazydog]

Do you have NAT and PREROUTE setup?

[yeshuawatso]

Not sure. How can I tell?

Webmin shows them there, but NAT is blank w/ no rules.

[Lazydog]

Which distro are you using?

[yeshuawatso]

Linux hostname 2.6.9-023stab046.2-smp #1 SMP Mon Dec 10 15:04:55 MSK 2007 x86_64 x86_64 x86_64 GNU/Linux

Fedora Core release 6 (Zod)

[Lazydog]

OK, Fedora is RH based and RH keeps it's firewall rules in /etc/sysconfig/iptables and see if there is a section towards the top with '*nat'.

If you feel comfortable post this file so that I can take a look.

[yeshuawatso]

# Generated by webmin
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A FORWARD -o venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_OUT:
-A FORWARD -i venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_IN:
-A OUTPUT -o venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_OUT:
-A INPUT -i venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_IN:
-A FORWARD -o venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_OUT:
-A FORWARD -i venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_IN:
-A OUTPUT -o venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_OUT:
-A INPUT -i venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_IN:
-A FORWARD -o venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_OUT:
-A FORWARD -i venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_IN:
-A OUTPUT -o venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_OUT:
-A INPUT -i venet0 -j LOG  --log-level 7 --log-prefix BANDWIDTH_IN:
# iax
-A INPUT -p udp -m udp -m multiport --ports 4569 -j ACCEPT
COMMIT
# Completed
# Generated by webmin
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
# Generated by webmin
*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed

[Lazydog]

What's with all the duplicate entries?
What's with 'venet0'?