[SOLVED] Bad built-in chain name with iptables-restore

OtagoHarbour · 03-28-2014, 10:24 PM

I saved my iptable settings on a Ubuntu 11.4 system using

Code:

iptables-save >filename

I then replaced the Ubuntu system with CentOS 6.5 and tried to restore iptables using

Code:

iptables-restore <filename

This resulted in

Code:

iptables-restore v1.4.7: Can't set policy 'INPUT' on 'ACCEPT' line 4: Bad bilt-in chain name

Line 4 is as follows.

Code:

:INPUT ACCEPT [199972:10416012]

In the past I have been able to restore iptables fron Ubuntu systems onto Debian systems but Debian is more closely related to Ubuntu than is CentOS. With CentOS, would I just need to add the rules manually?

furface · 03-29-2014, 09:18 AM

Have you looked at this down at the bottom?

https://bbs.archlinux.org/viewtopic.php?id=125126

OtagoHarbour · 03-29-2014, 12:11 PM

Quote:

Originally Posted by furface

Have you looked at this down at the bottom?

https://bbs.archlinux.org/viewtopic.php?id=125126

Thank you very much for your reply. I think it worked. I was initially a bit uncomfortable about simply commenting out line 4 but I did

Code:

iptables-save >iptables.original

on my CentOS box and saw that the

Code:

:INPUT ACCEPT

line was not present in iptables.original. So I commented out the line from the file I saved on Ubuntu and

Code:

iptables-restore <filename

no longer gave any error messages. I subsequently did

Code:

iptables-restore --list-rules

and the rules look like the ones that I want.

Thanks again,
OH