I'm having a problem with iptables, despite being an old hand with ipchains. I am getting the following message when I try to "start" my iptables:
Quote:
Applying iptables firewall rules: iptables-restore v1.2.6a: can't initialize iptables table `': Table does not exist (do you need to insmod?)
I would usually say that one of the iptables kernel modules isn't loaded, especially if the `' actually read `nat' or `mangle' or something similar.
The output of my lsmod is:
Quote:
Module Size Used by Not tainted
autofs 13348 0 (autoclean) (unused)
3c59x 30640 1
iptable_filter 2412 0 (autoclean) (unused)
ip_tables 14936 1 [iptable_filter]
mousedev 5524 0 (unused)
keybdev 2976 0 (unused)
hid 22244 0 (unused)
input 5888 0 [mousedev keybdev hid]
usb-uhci 26188 0 (unused)
usbcore 77024 1 [hid usb-uhci]
ext3 70368 2
jbd 52212 2 [ext3]
my iptables config is:
Quote:
# ------- Set default policy's for all built-in rules -------
-P INPUT DROP
-P OUTPUT ACCEPT
-P FORWARD DROP
# ------- Allow all ICMP packets to this machine ------------
-A INPUT -p icmp -j ACCEPT
# ------- Allow DNS udp and tcp packets to and from machine -
-A INPUT -p udp --dport 53 -s 0/0 -d 0/0 -b -j ACCEPT
-A INPUT -p tcp --dport 53 -s 0/0 -d 0/0 -b -j ACCEPT
# ------- Allow SSH tcp packets in --------------------------
-A INPUT -p tcp --dport 22 -j ACCEPT
# ------- Allow local packets through -----------------------
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A FORWARD -i lo -j ACCEPT
I would greatly appreciate any help. I have tried experimenting by removing rules and such, but the only way I have been able to get a clean startup is by having a blank config!
I'm not sure what is causing iptables to try and load a null `' table ... as I understood it the `filter' table is the default table. Also, please tell me to FAQ off if this is a commonly answered question. I've checked UNIX.COM and the
homepage mailing lists to no avail.
as an extension of this, I have tried starting just with the rule:
-P INPUT DROP
nothing else, and I still get the same error.
