Problem with unaccepted rules!

Problem with unaccepted rules!

[Silva Paulo]

I'm having the following problems with iptables 1.4.3.2 on gentoo linux. Also tried with  masked (unstable) version 1.4.4 with the same results.

1. Guarddog generated script fragment
+ iptables -N logdrop2
+ iptables -A logdrop2 -j LOG --log-prefix 'DROPPED ' --log-level 4 --log-ip-options --log-tcp-options --log-tcp-sequence
+ iptables -A logdrop2 -j DROP
+ iptables -N logdrop
+ iptables -A logdrop -m limit --limit 1/second --limit-burst 10 -j logdrop2
iptables: No chain/target/match by that name.
+ iptables -A logdrop -m limit --limit 2/minute --limit-burst 1 -j LOG --log-prefix 'LIMITED ' --log-level 4
iptables: No chain/target/match by that name.
+ iptables -A logdrop -j DROP

2. A rule of a script I wrote
# iptables -A OUTPUT -j ACCEPT -m state --state NEW,ESTABLISHED,RELATED
-o wlan0 -p tcp -m multiport --dports 80,443 -m multiport --sports
1024:65535
iptables v1.4.3.2: invalid port/service `1024:65535' specified
Try `iptables -h' or 'iptables --help' for more information.

I have tried several combinations of this command with no success!
On open suse 11.1 box of a friend ran the command without any problem with iptables 1.4.2-rc1!

Any help on this?
Thanks



      

Re: Problem with unaccepted rules!

[Karl Hiramoto]

Silva Paulo wrote:
> I'm having the following problems with iptables 1.4.3.2 on gentoo linux. Also tried with  masked (unstable) version 1.4.4 with the same results.
>
>   
Silvia,

On gentoo you have to compile and configure your own kernel.  You need
to  have the kernel module xt_multiport CONFIG_NETFILTER_XT_MATCH_MULTIPORT

and xt_limit  CONFIG_NETFILTER_XT_MATCH_LIMIT

See
http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=1&chap=7
http://www.gentoo.org/doc/en/gentoo-kernel.xml



--
Karl Hiramoto