Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
IP_TABLES error help please
View unanswered posts
View posts from last 24 hours

Goto page 1, 2, 3  Next  
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Thu May 27, 2004 8:58 pm    Post subject: IP_TABLES error help please Reply with quote

I can't get ip_tables to work with my system

keeps giving me errors
An error occured when checking your current IPtables configuration :

modprobe: Can't locate module ip_tables
iptables v1.2.9: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

This may indicate that your kernel does not support IPtables

This error was by webmin and I recieve same errors from console.

I went through every possible kernel configuration on my system, even adding everythign as modules ( in the ip tables support area )and it still doesnt work I don't know why.
Back to top
View user's profile Send private message
DaveArb
Guru
Guru


Joined: 29 Apr 2004
Posts: 510
Location: Texas, USA

PostPosted: Thu May 27, 2004 9:41 pm    Post subject: Reply with quote

This is everything that matches IPTAB and FILT from a working firewall/router:

Code:
CONFIG_IP_NF_IPTABLES=y
CONFIG_NETFILTER=y
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_ARPFILTER=y


I don't use them as modules, they are compiled into the kernel. Kernel is 2.6.6-rc1.

Dave
Back to top
View user's profile Send private message
Pachacamac
Veteran
Veteran


Joined: 22 Nov 2003
Posts: 1264
Location: Paris - France

PostPosted: Thu May 27, 2004 9:46 pm    Post subject: Reply with quote

Oh it is very simple you don't have iptables in your kernel.

You can find your information here
https://forums.gentoo.org/viewtopic.php?t=176792&postdays=0&postorder=asc&start=0
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Thu May 27, 2004 9:53 pm    Post subject: Reply with quote

it'd help if it was english :(

btw DaveArb I have no idea what you mean sorry im no guru.
Back to top
View user's profile Send private message
Pachacamac
Veteran
Veteran


Joined: 22 Nov 2003
Posts: 1264
Location: Paris - France

PostPosted: Thu May 27, 2004 10:16 pm    Post subject: Reply with quote

Ah okey, you don't speak french ?

I will do a Ctrl + C and Ctrl + v because I am a nice french boy ;)
Quote:

D'apres moi tu n'a pas compiler tout ce qu'il faut pour autoriser iptables a faire du NAT.
The translation is : "I think you don't have all you need in your kernel to use NAT with iptables"
Regarde bien si tu as dans ton noyau
Look if you have in your kernel :
Device Drivers --->
Networking support --->
Networking options --->
│ │ [*] TCP/IP networking │ │
│ │ [*] IP: multicasting │ │
│ │ [*] IP: advanced router │ │

│ │ [*] Network packet filtering (replaces ipchains) ---> │ │
│ │ IP: Netfilter Configuration ---> │ │

│ │ <*> Connection tracking (required for masq/NAT) │ │
│ │ <*> FTP protocol support │ │

│ │ <*> IP tables support (required for filtering/masq/NAT) │ │

│ │ <*> Packet filtering │ │
│ │ <*> REJECT target support │ │
│ │ <*> Full NAT │ │
│ │ <*> MASQUERADE target support │ │
│ │ <*> REDIRECT target support │ │

Voila, j'ai à peu près çà chez moi et çà roule.
So, I have this at home and it work fine


It is late here so I will sleep some hours.
Bye
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Thu May 27, 2004 10:37 pm    Post subject: Reply with quote

I have all of that.

The problem is its just that it's not working :'(
Back to top
View user's profile Send private message
mekong
Tux's lil' helper
Tux's lil' helper


Joined: 23 Apr 2004
Posts: 93
Location: Rdam - NL - EU

PostPosted: Thu May 27, 2004 11:26 pm    Post subject: Reply with quote

Just to make sure you have iptables enable on your running kernel.

zcat /proc/config.gz | grep IPTABLES

When I first installed Gentoo, I forget to mount /boot before copy the kernel and keep asking why my new compile kernel didn't work.
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Thu May 27, 2004 11:46 pm    Post subject: Reply with quote

no such file or directory.
Back to top
View user's profile Send private message
mekong
Tux's lil' helper
Tux's lil' helper


Joined: 23 Apr 2004
Posts: 93
Location: Rdam - NL - EU

PostPosted: Thu May 27, 2004 11:54 pm    Post subject: Reply with quote

Oh, config.gz it's an option on kernel. if you don't have it. Check if you have these files:

/proc/net/ip_tables_matches
/proc/net/ip_tables_names
/proc/net/ip_tables_targets
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Fri May 28, 2004 12:06 am    Post subject: Reply with quote

dont have those
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Fri May 28, 2004 1:29 am    Post subject: Reply with quote

is that bad? lol :evil:
Back to top
View user's profile Send private message
DaveArb
Guru
Guru


Joined: 29 Apr 2004
Posts: 510
Location: Texas, USA

PostPosted: Fri May 28, 2004 1:58 pm    Post subject: Reply with quote

Sorry, didn't mean to be cryptic. Your answer to Pachacamac covered my earlier comment.

Perhaps emerging iptables would fix up your problems.

Dave
Back to top
View user's profile Send private message
Pachacamac
Veteran
Veteran


Joined: 22 Nov 2003
Posts: 1264
Location: Paris - France

PostPosted: Fri May 28, 2004 2:30 pm    Post subject: Reply with quote

Yes DaveArb I think he miss something. But what ? I don't know.
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Fri May 28, 2004 10:52 pm    Post subject: Reply with quote

re-did it like 6 times.
Back to top
View user's profile Send private message
splooge
l33t
l33t


Joined: 30 Aug 2002
Posts: 636

PostPosted: Fri May 28, 2004 11:15 pm    Post subject: Reply with quote

Don't forget to mount /boot before installing the new kernel:

Code:
mount /boot
cd /usr/src/linux
make bzImage modules modules_install
cp arch/i386/boot/bzImage /boot

_________________
http://get.a.clue.de
Back to top
View user's profile Send private message
mekong
Tux's lil' helper
Tux's lil' helper


Joined: 23 Apr 2004
Posts: 93
Location: Rdam - NL - EU

PostPosted: Sat May 29, 2004 3:06 am    Post subject: Reply with quote

I think your current running kernel don't have iptables enables. Those files on /proc are created by kernel with iptables enable.
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Sat May 29, 2004 6:47 am    Post subject: Reply with quote

splooge wrote:
Don't forget to mount /boot before installing the new kernel:

Code:
mount /boot
cd /usr/src/linux
make bzImage modules modules_install
cp arch/i386/boot/bzImage /boot



i have both /usr/src/linux and /usr/src/linux-gentoo-src1 etc... which one should i use?
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Sat May 29, 2004 6:57 am    Post subject: Reply with quote

okay nm i did that now i get this error..

Code:
An error occured when checking your current IPtables configuration :

/lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: /lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: unresolved symbol nf_unregister_sockopt
/lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: /lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: unresolved symbol nf_register_sockopt
/lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: insmod /lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o failed
/lib/modules/2.4.25-gentoo-r1/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables failed
iptables v1.2.9: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

This may indicate that your kernel does not support IPtables


it can't be kernel configuration from the makefile but i guess its some other configuration issue, anyone have any suggestions? thx.
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Sat May 29, 2004 6:37 pm    Post subject: Reply with quote

bumpy
Back to top
View user's profile Send private message
mekong
Tux's lil' helper
Tux's lil' helper


Joined: 23 Apr 2004
Posts: 93
Location: Rdam - NL - EU

PostPosted: Sat May 29, 2004 6:44 pm    Post subject: Reply with quote

Hi, did you compile iptables as modules? Which option on netfilter did you select? just select them all. You use iptables for firewall right? I would compile it in the kernel instead as module. You need it loaded all the time anyway.
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Sat May 29, 2004 7:18 pm    Post subject: Reply with quote

I loaded them as modules and I selected everything except experimentals.

Please tell me what I would have to do as if you were going to do install iptables

that is mounting whatever the entire process of installing iptables because i keep hearing did u mount boot? blah blah blah im soo confused all I did was bassicaly

cd /usr/src/linux
make menuconfig
(do all the iptables configs)
save and exit
make dep
iptables -L
not working stupid errors....

what would i have to do to make it work? thx.
Back to top
View user's profile Send private message
splooge
l33t
l33t


Joined: 30 Aug 2002
Posts: 636

PostPosted: Sun May 30, 2004 2:33 am    Post subject: Reply with quote

splooge wrote:
Don't forget to mount /boot before installing the new kernel:

Code:
mount /boot
cd /usr/src/linux
make menuconfig
make bzImage modules modules_install
cp arch/i386/boot/bzImage /boot


then reboot to your new kernel.
_________________
http://get.a.clue.de
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Sun May 30, 2004 6:58 am    Post subject: Reply with quote

okay i did that like 500 million times and it didnt work, trying to reemerge blah blah blah ... damnit :(
Back to top
View user's profile Send private message
arachn1d
Guru
Guru


Joined: 15 Apr 2004
Posts: 369
Location: /var/www/wtf-dude.com lynx wtf-dude.com

PostPosted: Mon May 31, 2004 6:37 am    Post subject: Reply with quote

bump* :roll:
Back to top
View user's profile Send private message
gigel
Guru
Guru


Joined: 14 Jan 2003
Posts: 370
Location: .se/.ro

PostPosted: Mon May 31, 2004 11:22 am    Post subject: Reply with quote

whoa,this is weird ..
well,i must repeat what others said..
first make sure that /usr/src/linux is pointing to your kernel
compile iptables support into the kernel
after this,make sure in /usr/src/linux/.config
the lines that begin with CONFIG_IP_NF* are ending with "y" or "m" (except de " ,e.g. CONFIG_IP_NF_IPTABLES=m)

next emerge iptables
now what it the output from iptables -A INPUT -j DROP
and iptables -L
_________________
$emerge sux
:D
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Goto page 1, 2, 3  Next
Page 1 of 3

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum