iptables error

BizHat.com · 09-25-2006, 05:56 PM

Hi,

After upgrading kernel, iptables stoped working

Quote:

[root@linux ~]# iptables -L
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[root@linux ~]#

Can anyone tell me how to fix this error ?

Quote:

[root@linux ~]# uname -a
Linux linux.host.com 2.6.17.11 #1 Sun Aug 27 08:54:35 IST 2006 i686 athlon i386 GNU/Linux
[root@linux ~]#

Regards,

Yujin

dive · 09-25-2006, 05:57 PM

Did you compile in or build as module support for iptables in the kernel?

Brian1 · 09-25-2006, 06:04 PM

I would I assume you had maybe 2.6.14 or eariler. If you check the changelogs for 2.6.15 kernels will see the naming structure for netfilter changed so existing saved config files will not enable the netfilter section under networking. You just need to go into the netfilter section manually and enable as it was before in earlier config files if you have any.

Brian1

BizHat.com · 09-27-2006, 08:35 PM

Thanks all for the reply.

OS is Fedora Core release 3 and old kernel was vmlinuz-2.6.12-1.1381_FC3

The new kernel was compiled from source. The configuration file used to compile the kernel is

http://www.netfreehost.com/tmp/.config

I have done kernel compiling on another server today, getting same error on that too.

Quote:

# cat /etc/*release
CentOS release 4.4 (Final)
#

Quote:

# uname -a
Linux server1.wehost4u.net 2.6.18 #1 SMP Wed Sep 27 14:57:52 PDT 2006 i686 i686 i386 GNU/Linux
#

Quote:

# iptables -L
iptables v1.2.11: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
#

I know i can do this with out any problem with yum, but want to study how to do it from source.

Can any one tell me what i should do next ?

Brian1 · 09-28-2006, 05:05 PM

If you are using the .config file from the link you posted it does not have any netfilter items set as modules or built into the kernel. Open the config tool and set all items in the netfilter to modules unless they default to be built into the kernel. Then do the make command again. It should not take long if you do not reset the kernel tree build.

Brian1