Iptables - Error: No chain/target/match by that name

Iptables - Error: No chain/target/match by that name

[Rafael Dewes]

Friends, I am using iptables 1.5.7 + linux kernel 2.6.20.2 and the
last patch-o-magic.

But, when I exec this rule
iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT
This error occurs
iptables: No chain/target/match by that name

This occurs in the chain ACCEPT, DROP and REJECT, but if I modify the
rule for the following one:
iptables -I INPUT -s 192.168.0.0/24 -p tcp -j ACCEPT
or
iptables -I INPUT -s 192.168.0.0/24 -j ACCEPT

it is accepted, the error only occurs when I specify the the origin or
destination port.

Any Ideas to solve this?
Thanx.

iptables -L output:
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

modules loaded:
/sbin/modprobe ipt_REDIRECT
/sbin/modprobe ipt_state
/sbin/modprobe ipt_recent
/sbin/modprobe ipt_MASQUERADE
/sbin/modprobe ipt_LOG
/sbin/modprobe ip_tables
/sbin/modprobe iptable_filter
/sbin/modprobe iptable_nat
/sbin/modprobe ipt_conntrack
/sbin/modprobe ip_conntrack

Re: Iptables - Error: No chain/target/match by that name

[Mike Wright]

Rafael Dewes wrote:
> Friends, I am using iptables 1.5.7 + linux kernel 2.6.20.2 and the
> last patch-o-magic.
> 
> But, when I exec this rule
> iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT

Try this.

iptables -I INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 21 -j ACCEPT

Many of these types of filters can be found in the man page.  Look for 
MATCH EXTENSIONS.

hth, :m)

Re: Iptables - Error: No chain/target/match by that name

[dhottinger]

Quoting Mike Wright <xktnniuymlla@mailinator.com>:

> Rafael Dewes wrote:
>> Friends, I am using iptables 1.5.7 + linux kernel 2.6.20.2 and the
>> last patch-o-magic.
>>
>> But, when I exec this rule
>> iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT
>
> Try this.
>
> iptables -I INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 21 -j ACCEPT
>
> Many of these types of filters can be found in the man page.  Look for
> MATCH EXTENSIONS.
>
> hth, :m)

I started getting the same error message a couple of weeks ago.  Does  
it usually mean one of the rules is not good?  Im having a problem  
trying to find the bad rule.

ddh


-- 
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools

Re: Iptables - Error: No chain/target/match by that name

[Rafael Dewes]

> > Try this.
> >
> > iptables -I INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 21 -j ACCEPT
I tried, but error persists.

> I started getting the same error message a couple of weeks ago.  Does
> it usually mean one of the rules is not good?  Im having a problem
> trying to find the bad rule.
In my case, the firewall dont have any other rule.

-Regards.