Results 1 to 4 of 4
hi gurus i have a problem with iptables 1.3.5 and the kernel 2.6.20 here's the deal root@gateway:~# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables: Unknown error 4294967295 ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
- 02-17-2007 #1
problem with iptables and 2.6.20 kernel
i have a problem with iptables 1.3.5 and the kernel 2.6.20
here's the deal
root@gateway:~# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables: Unknown error 4294967295 ( yeah , right )
after that, i tried another thing
root@gateway:/boot# iptables -t nat -A PREROUTING -s 192.168.0.0/24 -j DNAT --to-destination 188.8.131.52
FATAL: Module ip_tables not found.
iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
oupsie, i downloaded the sources againd, looked in the kernel, and added the right things in it
after that, the nat table problem was solved, but i couldn't figure out the -m state --state problem, it still shows me the same output as before
what can be the problem ? i guess it's the kernel, meaning i have to add some things in it, but what ? .. cause i looked in it and i couldn't figure where's the problem ? do i need to upgrade iptables ?!
by the way, i am running slackware current
thanks in advance
- 02-17-2007 #2
From here :
:: Networking Options
:: Network Packet Filtering (Netfilter)
:: Core Netfilter Config.
== Netfilter connection tracking suppot (Y/M)
:: IP Netfilter Config.
== IPv4 connection tracking support (Y/M)
== Full NAT (Y/M)
Save; exit && rebuilt."To express yourself in freedom, you must die to everything of yesterday. From the 'old', you derive security; from the 'new', you gain the flow."
- 02-17-2007 #3
thanks mate, but i have already seen that post
i didn't help me
- 02-17-2007 #4
ok, i solved it
recompiled the kernel, and looked a little bit closer
it seems that in Core Netfilter Configuration i didn't have the support for the "state" match , so i built it in the kernel
works fine now !