View previous topic :: View next topic |
Author |
Message |
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Thu May 27, 2004 8:58 pm Post subject: IP_TABLES error help please |
|
|
I can't get ip_tables to work with my system
keeps giving me errors
An error occured when checking your current IPtables configuration :
modprobe: Can't locate module ip_tables
iptables v1.2.9: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
This may indicate that your kernel does not support IPtables
This error was by webmin and I recieve same errors from console.
I went through every possible kernel configuration on my system, even adding everythign as modules ( in the ip tables support area )and it still doesnt work I don't know why. |
|
Back to top |
|
|
DaveArb Guru
Joined: 29 Apr 2004 Posts: 510 Location: Texas, USA
|
Posted: Thu May 27, 2004 9:41 pm Post subject: |
|
|
This is everything that matches IPTAB and FILT from a working firewall/router:
Code: | CONFIG_IP_NF_IPTABLES=y
CONFIG_NETFILTER=y
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_ARPFILTER=y |
I don't use them as modules, they are compiled into the kernel. Kernel is 2.6.6-rc1.
Dave |
|
Back to top |
|
|
Pachacamac Veteran
Joined: 22 Nov 2003 Posts: 1264 Location: Paris - France
|
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Thu May 27, 2004 9:53 pm Post subject: |
|
|
it'd help if it was english
btw DaveArb I have no idea what you mean sorry im no guru. |
|
Back to top |
|
|
Pachacamac Veteran
Joined: 22 Nov 2003 Posts: 1264 Location: Paris - France
|
Posted: Thu May 27, 2004 10:16 pm Post subject: |
|
|
Ah okey, you don't speak french ?
I will do a Ctrl + C and Ctrl + v because I am a nice french boy
Quote: |
D'apres moi tu n'a pas compiler tout ce qu'il faut pour autoriser iptables a faire du NAT.
The translation is : "I think you don't have all you need in your kernel to use NAT with iptables"
Regarde bien si tu as dans ton noyau
Look if you have in your kernel :
Device Drivers --->
Networking support --->
Networking options --->
│ │ [*] TCP/IP networking │ │
│ │ [*] IP: multicasting │ │
│ │ [*] IP: advanced router │ │
│ │ [*] Network packet filtering (replaces ipchains) ---> │ │
│ │ IP: Netfilter Configuration ---> │ │
│ │ <*> Connection tracking (required for masq/NAT) │ │
│ │ <*> FTP protocol support │ │
│ │ <*> IP tables support (required for filtering/masq/NAT) │ │
│ │ <*> Packet filtering │ │
│ │ <*> REJECT target support │ │
│ │ <*> Full NAT │ │
│ │ <*> MASQUERADE target support │ │
│ │ <*> REDIRECT target support │ │
Voila, j'ai à peu près çà chez moi et çà roule.
So, I have this at home and it work fine |
It is late here so I will sleep some hours.
Bye |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Thu May 27, 2004 10:37 pm Post subject: |
|
|
I have all of that.
The problem is its just that it's not working :'( |
|
Back to top |
|
|
mekong Tux's lil' helper
Joined: 23 Apr 2004 Posts: 93 Location: Rdam - NL - EU
|
Posted: Thu May 27, 2004 11:26 pm Post subject: |
|
|
Just to make sure you have iptables enable on your running kernel.
zcat /proc/config.gz | grep IPTABLES
When I first installed Gentoo, I forget to mount /boot before copy the kernel and keep asking why my new compile kernel didn't work. |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Thu May 27, 2004 11:46 pm Post subject: |
|
|
no such file or directory. |
|
Back to top |
|
|
mekong Tux's lil' helper
Joined: 23 Apr 2004 Posts: 93 Location: Rdam - NL - EU
|
Posted: Thu May 27, 2004 11:54 pm Post subject: |
|
|
Oh, config.gz it's an option on kernel. if you don't have it. Check if you have these files:
/proc/net/ip_tables_matches
/proc/net/ip_tables_names
/proc/net/ip_tables_targets |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Fri May 28, 2004 12:06 am Post subject: |
|
|
dont have those |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Fri May 28, 2004 1:29 am Post subject: |
|
|
is that bad? lol |
|
Back to top |
|
|
DaveArb Guru
Joined: 29 Apr 2004 Posts: 510 Location: Texas, USA
|
Posted: Fri May 28, 2004 1:58 pm Post subject: |
|
|
Sorry, didn't mean to be cryptic. Your answer to Pachacamac covered my earlier comment.
Perhaps emerging iptables would fix up your problems.
Dave |
|
Back to top |
|
|
Pachacamac Veteran
Joined: 22 Nov 2003 Posts: 1264 Location: Paris - France
|
Posted: Fri May 28, 2004 2:30 pm Post subject: |
|
|
Yes DaveArb I think he miss something. But what ? I don't know. |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Fri May 28, 2004 10:52 pm Post subject: |
|
|
re-did it like 6 times. |
|
Back to top |
|
|
splooge l33t
Joined: 30 Aug 2002 Posts: 636
|
Posted: Fri May 28, 2004 11:15 pm Post subject: |
|
|
Don't forget to mount /boot before installing the new kernel:
Code: | mount /boot
cd /usr/src/linux
make bzImage modules modules_install
cp arch/i386/boot/bzImage /boot |
_________________ http://get.a.clue.de |
|
Back to top |
|
|
mekong Tux's lil' helper
Joined: 23 Apr 2004 Posts: 93 Location: Rdam - NL - EU
|
Posted: Sat May 29, 2004 3:06 am Post subject: |
|
|
I think your current running kernel don't have iptables enables. Those files on /proc are created by kernel with iptables enable. |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Sat May 29, 2004 6:47 am Post subject: |
|
|
splooge wrote: | Don't forget to mount /boot before installing the new kernel:
Code: | mount /boot
cd /usr/src/linux
make bzImage modules modules_install
cp arch/i386/boot/bzImage /boot |
|
i have both /usr/src/linux and /usr/src/linux-gentoo-src1 etc... which one should i use? |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Sat May 29, 2004 6:57 am Post subject: |
|
|
okay nm i did that now i get this error..
Code: | An error occured when checking your current IPtables configuration :
/lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: /lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: unresolved symbol nf_unregister_sockopt
/lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: /lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: unresolved symbol nf_register_sockopt
/lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: insmod /lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o failed
/lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables failed
iptables v1.2.9: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
This may indicate that your kernel does not support IPtables |
it can't be kernel configuration from the makefile but i guess its some other configuration issue, anyone have any suggestions? thx. |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Sat May 29, 2004 6:37 pm Post subject: |
|
|
bumpy |
|
Back to top |
|
|
mekong Tux's lil' helper
Joined: 23 Apr 2004 Posts: 93 Location: Rdam - NL - EU
|
Posted: Sat May 29, 2004 6:44 pm Post subject: |
|
|
Hi, did you compile iptables as modules? Which option on netfilter did you select? just select them all. You use iptables for firewall right? I would compile it in the kernel instead as module. You need it loaded all the time anyway. |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Sat May 29, 2004 7:18 pm Post subject: |
|
|
I loaded them as modules and I selected everything except experimentals.
Please tell me what I would have to do as if you were going to do install iptables
that is mounting whatever the entire process of installing iptables because i keep hearing did u mount boot? blah blah blah im soo confused all I did was bassicaly
cd /usr/src/linux
make menuconfig
(do all the iptables configs)
save and exit
make dep
iptables -L
not working stupid errors....
what would i have to do to make it work? thx. |
|
Back to top |
|
|
splooge l33t
Joined: 30 Aug 2002 Posts: 636
|
Posted: Sun May 30, 2004 2:33 am Post subject: |
|
|
splooge wrote: | Don't forget to mount /boot before installing the new kernel:
Code: | mount /boot
cd /usr/src/linux
make menuconfig
make bzImage modules modules_install
cp arch/i386/boot/bzImage /boot |
|
then reboot to your new kernel. _________________ http://get.a.clue.de |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Sun May 30, 2004 6:58 am Post subject: |
|
|
okay i did that like 500 million times and it didnt work, trying to reemerge blah blah blah ... damnit |
|
Back to top |
|
|
arachn1d Guru
Joined: 15 Apr 2004 Posts: 369 Location: /var/www/wtf-dude.com lynx wtf-dude.com
|
Posted: Mon May 31, 2004 6:37 am Post subject: |
|
|
bump* |
|
Back to top |
|
|
gigel Guru
Joined: 14 Jan 2003 Posts: 370 Location: .se/.ro
|
Posted: Mon May 31, 2004 11:22 am Post subject: |
|
|
whoa,this is weird ..
well,i must repeat what others said..
first make sure that /usr/src/linux is pointing to your kernel
compile iptables support into the kernel
after this,make sure in /usr/src/linux/.config
the lines that begin with CONFIG_IP_NF* are ending with "y" or "m" (except de " ,e.g. CONFIG_IP_NF_IPTABLES=m)
next emerge iptables
now what it the output from iptables -A INPUT -j DROP
and iptables -L _________________ $emerge sux
|
|
Back to top |
|
|
|