problem with documentation

problem with documentation

[Benjamin Case]

I have just completed the the installation of IPTABLES in Debian based on
Russel's "Packet Filter" documentation.

I am now attempting to create the rules that Russel has provided in the
"Rusty's Really Quick Guide To Filtering".

Unfortunately I am receiving an errror.

polm:/etc# iptables -N block
polm:/etc# iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables: No chain/target/match by that name

When I do an iptables -L , I can see the "block" chain.

Why does the second command return an error ?

Thanks,

Ben

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.681 / Virus Database: 443 - Release Date: 5/10/2004

Re: problem with documentation

[John A. Sullivan III]

On Fri, 2004-05-14 at 10:34, Benjamin Case wrote:
> I have just completed the the installation of IPTABLES in Debian based on
> Russel's "Packet Filter" documentation.
> 
> I am now attempting to create the rules that Russel has provided in the
> "Rusty's Really Quick Guide To Filtering".
> 
> Unfortunately I am receiving an errror.
> 
> polm:/etc# iptables -N block
> polm:/etc# iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
> iptables: No chain/target/match by that name
> 
> When I do an iptables -L , I can see the "block" chain.
> 
> Why does the second command return an error ?
> <snip>
Strange, it works fine for me.  Is there any chance that you do not have
connection tracking enabled? What happens if you try to create the same
rule but for the FORWARD chain? - John
-- 
John A. Sullivan III
Chief Technology Officer
Nexus Management
+1 207-985-7880
john.sullivan@nexusmgmt.com
---
If you are interested in helping to develop a GPL enterprise class
VPN/Firewall/Security device management console, please visit
http://iscs.sourceforge.net 

Re: problem with documentation

[Kiran Kumar Immidi]

On Friday 14 May 2004 08:04 pm, Benjamin Case wrote:

> polm:/etc# iptables -N block
> polm:/etc# iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
> iptables: No chain/target/match by that name
>
> When I do an iptables -L , I can see the "block" chain.
>
> Why does the second command return an error ?

The problem is because the state module is not being found. Make sure that 
libipt_state.so is among your iptables libraries, and that ipt_state.[k]o 
kernel module is present. It has nothing to do with the new chain that you 
have created.