From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andrea Subject: Re: problems applying ipset patch Date: Mon, 28 May 2007 11:02:20 +0200 Message-ID: <465A9A9C.2030304@gmail.com> References: <4653F176.4040604@gmail.com> <1179908784.18674.39.camel@henriknordstrom.net> <4654006D.9050704@gmail.com> <1179910939.18674.46.camel@henriknordstrom.net> <4654051E.8060508@gmail.com> <1179914093.18674.65.camel@henriknordstrom.net> <46543EDD.8040009@gmail.com> <46555D5C.7030406@gmail.com> <4655668B.6000401@gmail.com> <1180002776.17774.18.camel@henriknordstrom.net> <46556CBE.9000408@gmail.com> <46559618.8040708@gmail.com> <4655997E.7010407@gmail.com> <4655AEB6.5060004@gmail.com> <4655B3A8.10809@gmail.com> <4657147E.7040602@gmail.com> <1180149879.304.16.camel@henriknordstrom.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org Return-path: In-Reply-To: <1180149879.304.16.camel@henriknordstrom.net> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Henrik Nordstrom ha scritto: > fre 2007-05-25 klockan 18:53 +0200 skrev Andrea: > >> is there a method to resolve this mess? I could try to remove old >> version of iptables with "yum remove iptables", but this command also >> removes dependency of Shorewall, wich I would preserve. > > Specify the full path to the correct binary. You most likely have the > yum installed one in /sbin, and the manually installed one > in /usr/local/sbin/ I've unistalled the original iptables, then I've tried to manually pass rules: - iptables -A FORWARD -i eth1 -j ACCEPT ---- ok - iptables -A FORWARD -o eth1 -j ACCEPT ---- ok but - iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE ===> iptables v1.3.7: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. At this point I think the problem is in some missing settings in the kernel conf