Re: [gentoo-user] Change in kernel netfilter config causes an error

[Toby Cubitt]

On Mon, May 01, 2006 at 04:21:42PM +0200, Mick wrote:
> On 01/05/06, Toby Cubitt <tsc25@××××××.net> wrote:
> >On Mon, May 01, 2006 at 03:16:36PM +0200, Mick wrote:
> >
> >Ah. Didn't realise from your mail that the script didn't work. Without
> >the error messages it produces, it's mighty difficult to tell...
> >
> >But it's almost certainly a kernel-config issue, since until recently
> >I used the same script (derived from Daniel Robbins' IBM developer
> >works article, right?).
>
> That's right.  The script is basically the DR script minus NATing.
> The error message that I see at boot up is as originally posted, here
> it is again:

Okay, I've finally caught up with you ;-)

I was confused because the error below is from the gentoo iptables
init script, not from your script.

> ==============================
> # /etc/init.d/iptables restart
> * Loading iptables state and starting firewall ...
> iptables-restore v1.3.4: iptables-restore: unable to initializetable 'nat'
>
> Error occurred at line: 8
> Try `iptables-restore -h' or 'iptables-restore --help' for more
> information.    [ !! ]
> ==============================

It looks like it's trying to define NAT rules, even though you don't
use NAT. Maybe the old rules saved by gentoo's iptables init script
included some NAT rules?

Does running "/etc/init.d/iptables stop", then running your script,
then running "/etc/init.d/iptables save", then
"/etc/init.d/iptables start" help at all?

Toby
-- 
PhD Student
Quantum Information Theory group
Max Planck Institute for Quantum Optics
Garching, Germany

email: toby@××××××××.org
web: www.dr-qubit.org
-- 
gentoo-user@g.o mailing list