LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Reply
 
Search this Thread
Old 05-06-2007, 12:20 PM   #1
l0rddarkf0rce
Member
 
Registered: Nov 2004
Posts: 83

Rep: Reputation: 18
iptables error


Running iptables v1.3.5 on Slack 11 kernel 2.6.21.1. The following entry in my rc.firewall file

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

is generating the error

iptables: Unknown error 4294967295

Any ideas on how to fix this error?
 
Old 05-06-2007, 01:24 PM   #2
simcox1
Member
 
Registered: Mar 2005
Location: UK
Distribution: Slackware
Posts: 794
Blog Entries: 2

Rep: Reputation: 30
Do you need to specify which port and which interface it's on?

eg

iptables -A INPUT -p ALL -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
 
Old 05-06-2007, 07:44 PM   #3
l0rddarkf0rce
Member
 
Registered: Nov 2004
Posts: 83

Original Poster
Rep: Reputation: 18
I shouldn't have to do that. I just tried it for fun and still got the same error. This is one of the lines that I have in my rc.firewall script. This line was working just fine until I upgraded the kernel.
 
Old 05-07-2007, 09:42 AM   #4
jeenam
Member
 
Registered: Dec 2006
Distribution: Slackware 11
Posts: 144

Rep: Reputation: 15
The problem is the combination of the newer kernel and the ancient version of iptables running on the system. Slack 11 (obviously) comes with v1.3.5 of the iptables userspace software. Use v1.3.6 or greater. From the netfilter.org site:

http://www.netfilter.org/projects/ip...bles-1.3.6.txt

- Fix "Unknown error 4294967295" message
[ Bugzilla #460, Patrick McHardy ]

iptables v1.3.7 was released December of 2006 but it may not compile properly for you. If that is the case, get one of the latest snapshot releases: ftp://ftp.netfilter.org/pub/iptables/snapshot/
 
Old 05-07-2007, 03:29 PM   #5
l0rddarkf0rce
Member
 
Registered: Nov 2004
Posts: 83

Original Poster
Rep: Reputation: 18
I'll download and recompile tonight and see if that helps. Thanks for the assistance.
 
Old 05-07-2007, 04:01 PM   #6
l0rddarkf0rce
Member
 
Registered: Nov 2004
Posts: 83

Original Poster
Rep: Reputation: 18
OK downloaded, compiled, and installed 3.7. Now when I enter the same command

Code:
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
I get

iptables: No chain/target/match by that name

After RTFM pages I saw that there are 2 new options that aparently extend what I have above they are conntrack and --ctstate I tried those and I get the same error message. So now my line looks like

Code:
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
Any ideas?
 
Old 05-07-2007, 04:48 PM   #7
rworkman
Slackware Contributor
 
Registered: Oct 2004
Location: Tuscaloosa, Alabama (USA)
Distribution: Slackware
Posts: 1,913

Rep: Reputation: Disabled
You're missing support for some iptables stuff in your kernel config. Enable everything iptables related as modules [1][2] and it will work.

[1] No, it's not a security risk. If it's not being used, the module won't be loaded.
[2] No, it's not strictly necessary to have *everything* enabled, but if you knew what was and wasn't needed, you wouldn't be here, would you?
 
Old 05-08-2007, 10:09 AM   #8
jeenam
Member
 
Registered: Dec 2006
Distribution: Slackware 11
Posts: 144

Rep: Reputation: 15
rworkman is correct. More specifically, conntrack and State matching must be enabled in your kernel config before recompiling.
 
Old 05-10-2007, 10:12 PM   #9
l0rddarkf0rce
Member
 
Registered: Nov 2004
Posts: 83

Original Poster
Rep: Reputation: 18
thanks everyone! that's what i love about this site. you have questions, you get answers.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
An error occured getting IPtables status from the command /etc/rc.d/init.d/iptables s CrazyMAzeY Linux - Newbie 10 08-12-2010 05:25 AM
iptables error BizHat.com Linux - Software 4 09-28-2006 04:05 PM
iptables v1.2.9: Unknown arg `/sbin/iptables' Try `iptables -h' or 'iptables --help' Niceman2005 Linux - Security 4 12-29-2005 08:20 PM
Need help with iptables error. Anxiety Linux - Networking 1 03-31-2004 03:01 PM
iptables error... HappyDude Linux - Security 4 07-14-2003 07:37 PM


All times are GMT -5. The time now is 08:15 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration