Iptables command failed

Iptables command failed

[manisha s]

Hello All,

I m new to this mailing list and I don't know if
somebody have faced such a problem and may have
answerd to this question.

I m using kernel 2.4.22 and iptables rpm 1.2.7a-2.
I compiled a kernel to support the Network filtering
successfully. But when i issued the following command

iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP

i got the following error

/lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
unresolved symbol nf_register_sockopt_Rsmp_f5985dce

/lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
unresolved symbol nf_unregister_sockopt_Rsmp_a5c3249c

/lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
insmod 
/lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o
failed

/lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
insmod ip_tables failed

iptables v1.2.7a: can't initialize iptables table
`filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.


what this error means?do i need to update the iptables
or kernel?

Any help or hint would be appreciated

Thanks in advance
Manisha

__________________________________
Do you Yahoo!?
Yahoo! Small Business $15K Web Design Giveaway 
http://promotions.yahoo.com/design_giveaway/

Re: Iptables command failed

[Rob Sterenborg]

> I m using kernel 2.4.22 and iptables rpm 1.2.7a-2.
> I compiled a kernel to support the Network filtering
> successfully. But when i issued the following command
> 
> iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP
> 
> i got the following error
> 
> /lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
> unresolved symbol nf_register_sockopt_Rsmp_f5985dce
> 
....
> 
> iptables v1.2.7a: can't initialize iptables table
> `filter': iptables who? (do you need to insmod?)
> Perhaps iptables or your kernel needs to be upgraded.
> 
> 
> what this error means?do i need to update the iptables
> or kernel?

Did you compile a new kernel without updating iptables ?
If so, compile a new iptables (1.2.9) too.


Gr,
Rob

Re: Iptables command failed

[manisha s]

[-- Attachment #1: Type: text/plain, Size: 1788 bytes --]

Hi,
I have downloaded iptables-1.2.9 from netfilter.org and installed using  make and make install commands after compiling the kernel with network packet filtering (replaces ipchains) option having value yes
 
also the settings under IP netfilter configuration are. 
 
connection tracking   module
FTP, amanda ,TFTP,IRC support no
IP tables support (required for filtering/masq/NAT)  module
 
Packet filtering                  module
full NAT                            module
Redirect support               module
ipchains 2.2 style support  no
ipchains 2.0 style support no
 
then i compiled kernel and rebooted machine
But when i issued the following command
> 
> iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP
> 
> i got the following error
> 
> /lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
> unresolved symbol nf_register_sockopt_Rsmp_f5985dce

plz give me more insight on this issue
 


Rob Sterenborg <rob@sterenborg.info> wrote:
 
> I m using kernel 2.4.22 and iptables rpm 1.2.7a-2.
> I compiled a kernel to support the Network filtering
> successfully. But when i issued the following command
> 
> iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP
> 
> i got the following error
> 
> /lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
> unresolved symbol nf_register_sockopt_Rsmp_f5985dce
> 
....
> 
> iptables v1.2.7a: can't initialize iptables table
> `filter': iptables who? (do you need to insmod?)
> Perhaps iptables or your kernel needs to be upgraded.
> 
> 
> what this error means?do i need to update the iptables
> or kernel?

Did you compile a new kernel without updating iptables ?
If so, compile a new iptables (1.2.9) too.


Gr,
Rob



---------------------------------
Do you Yahoo!?
Yahoo! Small Business $15K Web Design Giveaway - Enter today

[-- Attachment #2: Type: text/html, Size: 2816 bytes --]

Re: Iptables command failed

[Rob Sterenborg]

> I have downloaded iptables-1.2.9 from netfilter.org and
> installed using  make and make install commands after
> compiling the kernel with network packet filtering
> (replaces ipchains) option having value yes

Did you patch the kernel with a new Patch-O-Matic (also from the Netfilter
website) before you configured/compiled it ?
I suppose iptables-1.2.9 requires symbols not yet in an unpatched kernel.

> > iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP
> >
> > i got the following error
> >
> > /lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
> > unresolved symbol nf_register_sockopt_Rsmp_f5985dce


Gr,
Rob

Re: Iptables command failed

[manisha s]

Hi,

Thanks for ur help....
i again recompiled the kernel with netfilter support
and the iptables is now working fine....
i think i did not copied the newly kernel image to the
boot dir  so that the problem remained....

anyway
thanks once again for ur time


--- Rob Sterenborg <rob@sterenborg.info> wrote:
> > I have downloaded iptables-1.2.9 from
> netfilter.org and
> > installed using  make and make install commands
> after
> > compiling the kernel with network packet filtering
> > (replaces ipchains) option having value yes
> 
> Did you patch the kernel with a new Patch-O-Matic
> (also from the Netfilter
> website) before you configured/compiled it ?
> I suppose iptables-1.2.9 requires symbols not yet in
> an unpatched kernel.
> 
> > > iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP
> > >
> > > i got the following error
> > >
> > >
>
/lib/modules/2.4.22/kernel/net/ipv4/netfilter/ip_tables.o:
> > > unresolved symbol
> nf_register_sockopt_Rsmp_f5985dce
> 
> 
> Gr,
> Rob
> 
> 


__________________________________
Do you Yahoo!?
Yahoo! Small Business $15K Web Design Giveaway 
http://promotions.yahoo.com/design_giveaway/