Re: problems applying ipset patch

[Andrea <andang76@gmail.com>]

Jozsef Kadlecsik ha scritto:
> On Thu, 24 May 2007, Andrea wrote:
> 
>>> No, 'make install' will overwrite existing shared libraries and 
>>> binaries. Just make sure you use the correct iptables binary if you 
>>> have got one installed in another directory, too, from your 
>>> distribution.
>>
>> Kernel now works fine!
>>
>> I've rebooted the system with the new kernel, compiled and installed 
>> iptables and ipset, rebooted again.
>>
>> At the startup, however, iptables failed to start, (and so the 
>> shorewall script), with the message "iptables-restore: line 10 failed"
> 
> What's in line 10??

In what file do I have to find? /etc/sysconfig/iptables, maybe?

Here it is:

# Generated by iptables-save v1.2.11 on Mon May 14 10:59:07 2007
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth2 -j ACCEPT
-A FORWARD -o eth2 -j ACCEPT
-A OUTPUT -j ACCEPT
COMMIT
# Completed on Mon May 14 10:59:07 2007
# Generated by iptables-save v1.2.11 on Mon May 14 10:59:07 2007
*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed on Mon May 14 10:59:07 2007
# Generated by iptables-save v1.2.11 on Mon May 14 10:59:07 2007
*mangle
:PREROUTING ACCEPT [10461:714412]
:INPUT ACCEPT [5007:406609]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [3176:400160]
:POSTROUTING ACCEPT [3176:400160]
COMMIT
# Completed on Mon May 14 10:59:07 2007