Re: iptables filter rules Question??

[fbrian@nac.net]

> Incoming from fbrian@nac.net:
>>
>> I still am stuck; Not sure why this error is happening
>>
>> EULER:~# iptables -A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED
>> -j
>> ACCEPT
>> iptables: No chain/target/match by that name
>> EULER:~#
>>
>> here is the output of lsmod
>
> Ah, hah!  I have ipt_LOG and ipt_state on top of yours.  Try
> insmod-ing them (or at least the latter).


Thanks!

I was able to load ipt_LOG

but I was not able to load ipt_state

I tried these...

EULER:~# insmod ipt_STATE
insmod: ipt_STATE: no module by that name found

and

EULER:~# insmod ipt_state
insmod: ipt_state: no module by that name found

I am guessing there is a kernel module I need to build to be able to use
ipt_state?

Do you know how to build and insert a kernel module with out rebuiding the
entire kernel?  If so could you fill me in.

Thanks for all the help and pateince.

Brian


>> EULER:~# lsmod
>> Module                  Size  Used by    Tainted: P
>> ipt_REJECT              2720   0  (autoclean)
>> iptable_filter          1728   0  (autoclean)
>> bsd_comp                3968   0  (autoclean)
>> ppp_async               5984   1  (autoclean)
>> r128                   82840   1
>> lp                      5984   0  (autoclean)
>> slip                    7904   0  (autoclean)
>> parport_pc             14980   2  (autoclean)
>> plip                   10760   1  (autoclean)
>> parport                24576   2  (autoclean) [lp parport_pc plip]
>> iptable_nat            18228   0  (autoclean)
>> ip_conntrack           19212   1  (autoclean) [iptable_nat]
>> ip_tables              13056   5  [ipt_REJECT iptable_filter
>> iptable_nat]
>> ppp_deflate            39040   0
>> ppp_generic            14088   3  [bsd_comp ppp_async ppp_deflate]
>> slhc                    4352   2  [slip ppp_generic]
>> rtc                     5368   0  (autoclean)
>> EULER:~#
>>
>>
>> Version of IPtables:
>>
>> ii  iptables       1.2.6a-5     IP packet filter administration tools
>> for 2.
>
> --
> Any technology distinguishable from magic is insufficiently advanced.
> (*)               http://www.spots.ab.ca/~keeling
> - -
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>