iptables delete rule

Fredde87 · 11-01-2006, 11:03 AM

Can someone please explain to me why this happens...

Code:

[root@ipg2 /]$iptables -I FORWARD -p TCP -d 123.123.123.13 --dport 543 -j ACCEPT
[root@ipg2 /]$iptables -D FORWARD -p TCP -d 123.123.123.13 --dport 543 -j ACCEPT
iptables: Bad rule (does a matching rule exist in that chain?)

Am I missing something? :S

Mara · 11-01-2006, 01:19 PM

It works fine here. Please check if the rule is really added at the first place.

Fredde87 · 11-02-2006, 03:07 AM

it is... Thats the weird thing, first I thought it wasnt being added properly but it is. Iptables is very slow though, iptables -L waits exactly 10 seconds between every entry when it is printing it to the screen.

icechong · 11-02-2006, 03:37 AM

it works fine on my linux box also.

Fredde87 · 11-02-2006, 07:46 AM

I know it should work... Its just on this busybox where I am having trouble. I found a thread with someone who had the same issue but his issue was caused by update iptables without flushing old rules before. But I havent updated it and it wont even delete new rules like the one I posted first.

Fredde87 · 11-03-2006, 04:55 AM

I guess I will have to find someother way to remove the rule. Any tips on the best way of finding which line a rule is on so I can delete it? Problem is iptables replaces the port number with the service name (does it look up the port number in /etc/services ?)

Fredde87 · 11-03-2006, 09:09 AM

I have to go in another direction... What I am now going to do is flush the chain and just run the rules again. There are some standard rules though which comes with this busybox PC that I want to keep though... so I was just wondering what command should I run if I want to add the following rules,

REJECT udp -- anywhere anywhere udp dpts:netbios-ns:netbios-dgm reject-with icmp-port-unreachable
LOG all -- anywhere anywhere limit: avg 10/min burst 5 LOG level warning prefix `DROP INP: '
REJECT tcp -- anywhere anywhere reject-with tcp-reset
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable