1 |
Суббота, 4 мая 2013, 12:41 -04:00 от Nick Khamis <symack@×××××.com>: |
2 |
> Hello Everyone, |
3 |
> |
4 |
> While trying to include a logging chain to our IPTables rules, I am |
5 |
> receiving the following |
6 |
> error: (iptables: No chain/target/match by that name. |
7 |
> |
8 |
> The chain looks like: |
9 |
> |
10 |
> # Set Log Limit |
11 |
> LOGLIMIT="2/s" |
12 |
> LOGLIMITBURST="10" |
13 |
> |
14 |
> $IPTABLES -N LOGDROP |
15 |
> |
16 |
> #echo -e " - Logging Dropped Traffic" |
17 |
> # $IPTABLES -A LOGDROP -i $INTIF1 -p tcp -m limit --limit $LOGLIMIT |
18 |
> --limit-burst $LOGLIMITBURST -j LOG --log-prefix "TCP LOGDROP: " |
19 |
> |
20 |
> # $IPTABLES -A LOGDROP -j DROP |
21 |
> # $IPTABLES -A INPUT -p icmp -i $INTIF1 -j LOGDROP |
22 |
> # $IPTABLES -A INPUT -p tcp -i $INTIF1 -j LOGDROP |
23 |
> # $IPTABLES -A INPUT -p udp -i $INTIF1 -j LOGDROP |
24 |
> |
25 |
> Some searching caused me to make sure that I have the correct modules loaded: |
26 |
> |
27 |
> modprobe ipt_LOG |
28 |
> |
29 |
> Module Size Used by |
30 |
> iptable_nat 3220 0 |
31 |
> nf_nat 11228 1 iptable_nat |
32 |
> ipt_LOG 6454 0 |
33 |
> ipt_REJECT 1917 3 |
34 |
> nf_conntrack_ipv4 9141 10 nf_nat,iptable_nat |
35 |
> nf_defrag_ipv4 847 1 nf_conntrack_ipv4 |
36 |
> iptable_filter 988 1 |
37 |
> ip_tables 8370 2 iptable_filter,iptable_nat |
38 |
> |
39 |
> |
40 |
> But still no go. |
41 |
> |
42 |
6 or 4? |