iptables- new install
 

I just recently had to re-install linux (today), and I was trying to go ahead and set up my custom firewall rules using iptables but i run into a problem, here is what i get:

[root@decatur robert]# /sbin/iptables -P INPUT DROP
/lib/modules/2.4.18-27.7.x/kernel/net/ipv4/netfilter/ip_tables.o: init_module: Device or resource busy
Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters.
You may find more information in syslog or the output from dmesg
/lib/modules/2.4.18-27.7.x/kernel/net/ipv4/netfilter/ip_tables.o: insmod /lib/modules/2.4.18-27.7.x/kernel/net/ipv4/netfilter/ip_tables.o failed
/lib/modules/2.4.18-27.7.x/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables failed
iptables v1.2.5: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[root@decatur robert]#


i have no clue what's wrong, this is off a fresh install of RedHat 7.3 plus any upgrades from RHN that i downloaded, iptables is installed and running because if i just type the iptables command i get this:


[root@decatur robert]# /sbin/iptables
iptables v1.2.5: no command specified
Try `iptables -h' or 'iptables --help' for more information.
[root@decatur robert]#



but it's when i try to add a rule or change a policy that i get the error message.

Check whether any of the iptables modules
are loaded first ...

lsmod

Cheers,
Tink

how do i check to see if the modules are loaded, and if they arent loaded how do i load em and get em to load automatically

anybody?

sheeesh ...
Just READ what I posted mate...
The command to see loaded modules is

:P

Cheers,
Tink

sorry man, it looked like a capital "i" and didnt work so i wasnt sure: this is what i got :


[root@decatur log]# /sbin/lsmod
Module Size Used by Not tainted
sr_mod 16056 0 (autoclean)
emu10k1 60832 1 (autoclean)
ac97_codec 12256 0 (autoclean) [emu10k1]
sound 69260 0 (autoclean) [emu10k1]
soundcore 6212 7 (autoclean) [emu10k1 sound]
radeon 96248 13
agpgart 40096 3
binfmt_misc 7236 1
autofs 11140 0 (autoclean) (unused)
tulip 41312 2
ipchains 40008 3
ide-scsi 9376 0
scsi_mod 104848 2 [sr_mod ide-scsi]
ide-cd 30144 0
cdrom 31968 0 [sr_mod ide-cd]
usb-uhci 24292 0 (unused)
usbcore 71104 1 [usb-uhci]
ext3 64768 2
jbd 47892 2 [ext3]


i see ipchains but not iptables, i tried loading iptables via insmod, this is what i did:

[root@decatur log]# /sbin/insmod /lib/modules/2.4.18-27.7.x/kernel/net/ipv4/netfilter/ip_tables.o
/lib/modules/2.4.18-27.7.x/kernel/net/ipv4/netfilter/ip_tables.o: init_module: Device or resource busy
Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters.
You may find more information in syslog or the output from dmesg

why would it give me "Device or resource busy", i turned off ipchains and ip6tables and restarted iptables but i still get the same errors.

is ipchains as good as iptables? if i cant get iptables to work, and ipchains is just as good, then i guess i'll go with ipchains, but i really want iptables.

try to do this first:
chkconfig --level 345 ipchains off
serviece ipchains stop

rpm -q iptables

Check that if you have installed iptables. Also tell us which version of Linux you are using

ipchains does not have the powerful features offered by iptables. What does uname -a say? You're using a Kernel < 2.4, correct ?

[root@decatur robert]# /sbin/service ipchains stop
Flushing all chains: [ OK ]
Removing user defined chains: [ OK ]
Resetting built-in chains to the default ACCEPT policy: [ OK ]
[root@decatur robert]# rpm -q iptables
iptables-1.2.5-3

yea it's there, Red Hat 7.3

note: iptables was working fine before, but i had to reformat the drive and re-install everything, iptables was installed by default just like last time, but im getting these crazy errors this time around. im about to try using the older kernel just to see if that makes a difference, i'll let you know after i reboot and come back.

well what-do-you-know, iptables works fine with my older kernel (the one that comes with rh 7.3) but not with the latest kernel. Any ideas on what the problem could be? I'm not good with kernel issues by any means.