Re: iptables wrong version?

[Justin Guerin <justin_guerin@yahoo.com>]

Philip Mak wrote:

> I am trying to ban an IP address from my server (*.*.*.* is a real
> IP):
> 
> [root@naga root]# ipchains -A INPUT --source *.*.*.* -p tcp -j DROP
> ipchains: Protocol not available
> [root@naga root]# iptables -A INPUT --source *.*.*.* -p tcp -j DROP
> iptables v1.2.11: can't initialize iptables table `filter': Module is
> wrong version Perhaps iptables or your kernel needs to be upgraded.

This works for me, if I substitute 10.1.2.3 for your *s.

> [root@naga root]# uname -a
> Linux naga.aaanime.net 2.6.8-11-amd64-k8 #1 Sun Oct 2 21:26:54 UTC 2005
> x86_64 GNU/Linux

for comparison, I'm running 2.6.15
justin@jguerin-lt:~$ uname -a
Linux jguerin-lt 2.6.15-1-686 #1 Fri Feb 10 15:49:07 UTC 2006 i686 GNU/Linux

> [root@naga root]# apt-get install iptables
> Reading Package Lists... Done
> Building Dependency Tree... Done
> iptables is already the newest version.
> 0 upgraded, 0 newly installed, 0 to remove and 7 not upgraded.
> 
> Does anyone know what I'm doing wrong?

Which modules relating to iptables do you have loaded?  Also, you're sure
the module is from the kernel currently running?  I.e. if you've upgraded
from one version of 2.6.8 to another, but not yet rebooted, you could be
getting module errors.  I would figure they wouldn't install, but I've
never actually tried it to see what happens, so I don't know.

You might try reinstalling your kernel image.  Sometimes, package
installations can get messed up for unknown reasons.

Hope that helps,
Justin