| View previous topic :: View next topic |
| Author |
Message |
thompsonmike
Apprentice
Joined: 19 Jan 2004
Posts: 275
Location: Bath UK
|
 Posted: Mon Mar 08, 2004 8:16 am Post subject: IPTables (Groan I hear!) Problems |
 |
|
I am trying to get my IPTables up and running. I can quite happily set up rules for dropping connections, but when I try and use Allow or deny it bombs with this error
| Code: |
polaris root # iptables -A INPUT -p tcp --destination-port http -i eth1 -j ALLOW
iptables v1.2.9: Couldn't load target `ALLOW':/lib/iptables/libipt_ALLOW.so: cannot open shared object file: No such file or directory
Try `iptables -h' or 'iptables --help' for more information.
|
Have I missed something on installation?
Also nothing seems to be getting logged, how do I enable firewall logging into syslog??
Many Thanks for any help people!
_________________
Thanks
Michael.. |
|
| Back to top |
|
 |
adaptr
Watchman
Joined: 06 Oct 2002
Posts: 6730
Location: Rotterdam, Netherlands
|
| Posted: Mon Mar 08, 2004 8:53 am Post subject: Re: IPTables (Groan I hear!) Problems |
|
|
| thompsonmike wrote: | I am trying to get my IPTables up and running. I can quite happily set up rules for dropping connections, but when I try and use Allow or deny it bombs with this error
| Code: |
polaris root # iptables -A INPUT -p tcp --destination-port http -i eth1 -j ALLOW
iptables v1.2.9: Couldn't load target `ALLOW':/lib/iptables/libipt_ALLOW.so: cannot open shared object file: No such file or directory
Try `iptables -h' or 'iptables --help' for more information.
|
Have I missed something on installation? |
Probably - it says so, at least.
Check your kernel .config:
| Code: | | grep CONFIG_IPT /usr/src/linux/.config |
| thompsonmike wrote: | | Also nothing seems to be getting logged, how do I enable firewall logging into syslog?? |
By running chains through a LOG target.
man iptables for more.
_________________
>>> emerge (3 of 7) mcse/70-293 to /
Essential tools: gentoolkit eix profuse screen |
|
| Back to top |
|
|
Chris W
l33t
Joined: 25 Jun 2002
Posts: 972
Location: Brisbane, Australia
|
| Posted: Mon Mar 08, 2004 9:26 am Post subject: |
|
|
The target is ACCEPT not ALLOW.
_________________
Cheers,
Chris W
"Common sense: The collection of prejudices acquired by age 18." -- Einstein |
|
| Back to top |
|
|
adaptr
Watchman
Joined: 06 Oct 2002
Posts: 6730
Location: Rotterdam, Netherlands
|
| Posted: Mon Mar 08, 2004 10:03 am Post subject: |
|
|
D'oh!
_________________
>>> emerge (3 of 7) mcse/70-293 to /
Essential tools: gentoolkit eix profuse screen |
|
| Back to top |
|
|
|
Networking & Security
