unable to load iptables

Subscribe to unable to load iptables 2 post(s), 2 voice(s)

 
Avatar alexis perrier 2 post(s)

Hi
I’m trying to define my own iptables. The brightbox firewall has been removed and all ports are now open.

I have a problem when I do
> sudo iptables-restore < /etc/iptables.test.rules

I always get the error message
iptables-restore: line 42 failed
line 42 corresponds to the COMMIT line. The COMMIT fails

The /etc/iptables.test.rules I use is shown below.
I got it from a reliable source and do not believe its a syntax problem.

Thanks for your help
Alexis
/etc/iptables.test.rules :

*filter

  1. Allows all loopback (lo0) traffic and drop all traffic to 127/8 that doesn’t use lo0
    -A INPUT -i lo -j ACCEPT
    -A INPUT -i ! lo -d 127.0.0.0/8 -j REJECT
  1. Accepts all established inbound connections
    -A INPUT -m state —state ESTABLISHED,RELATED -j ACCEPT
  1. Allows all outbound traffic
  2. You can modify this to only allow certain traffic
    -A OUTPUT -j ACCEPT
  1. Allows HTTP and HTTPS connections from anywhere (the normal ports for websites)
    -A INPUT -p tcp —dport 80 -j ACCEPT
    -A INPUT -p tcp —dport 443 -j ACCEPT
  1. Allows SSH connections
    #
  2. THE -dport NUMBER IS THE SAME ONE YOU SET UP IN THE SSHD_CONFIG FILE
    #
    -A INPUT -p tcp -m state —state NEW —dport 22 -j ACCEPT
  1. Allow ping
    -A INPUT -p icmp -m icmp —icmp-type 8 -j ACCEPT
  1. log iptables denied calls
    -A INPUT -m limit —limit 5/min -j LOG —log-prefix "iptables denied: " —log-level 7
  1. Reject all other inbound – default deny unless explicitly allowed policy
    -A INPUT -j REJECT
    -A FORWARD -j REJECT

COMMIT

 
Avatar John Leach Administator 83 post(s)

Hi Alexis,

it’s likely that you need to install the extra kernel modules package, so iptables can load what it needs. See http://wiki.brightbox.co.uk/docs:kernel#extra_k…

Thanks,

John.

Signup or login to contribute