Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Pär <parhaggbladster@gmail.com>
To: netfilter@lists.netfilter.org
Subject: Target rules does not work on kernel 2.6.17.x.
Date: Fri, 04 Aug 2006 09:07:33 +0200	[thread overview]
Message-ID: <44D2F235.7070405@gmail.com> (raw)

Hi.
Having trouble with iptables when upgrading from kernel 2.6.13 to 2.6.17.x .
My old firewall rules are not functioning anymore.

Target rules that are using -j DNAT  such as this one:
$IPTABLES  -A PREROUTING -t nat -i $EXT -p tcp --dport 3389 -j DNAT --to 
192.168.x.x:3389

and j- ACCEPT
$IPTABLES  -A INPUT -p tcp -i $EXT -d 0/0 --dport 3724 -j ACCEPT

Does not work.
For iptables 1.3.4 it does not work (returns an errorcode) and for
1.3.5_iptables-1.3.5-20060702 it returns

iptables: No chain/target/match by that name

I have all iptables dependent modules in the kernel set as loadable modules.
So I do this in the beginning of the firewall script:

modprobe ip_tables
modprobe ip_conntrack_irc
modprobe ip_conntrack
modprobe ip_nat_irc
modprobe iptable_filter
modprobe iptable_nat
modprobe iptable_mangle
modprobe ipt_conntrack
modprobe ipt_MASQUERADE
modprobe ipt_multiport
modprobe ipt_state
modprobe ipt_REDIRECT
modprobe ipt_REJECT
modprobe ipt_LOG

Anyone have any ideas on how to proceed on this ?
I really need 2.6.17.x in order to activate new  wireless  functions 
that has been added into the 2.6.17.x kernel.

Cheers

/P






             reply	other threads:[~2006-08-04  7:07 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-08-04  7:07 Pär [this message]
2006-08-04 17:32 ` Target rules does not work on kernel 2.6.17.x Jan Engelhardt
2006-08-05 17:46   ` Pär

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=44D2F235.7070405@gmail.com \
    --to=parhaggbladster@gmail.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox