[Tfug] iptables puzzle

Adrian choprboy at dakotacom.net
Thu Nov 10 23:35:53 MST 2005


On Thursday 10 November 2005 20:41, ewf wrote:
[snip]
> Namely:
> sage:~# iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT
> 
> I get:
> iptables: No chain/target/match by that name
> 

Well.... I assume that iptables is actually running so the INPUT/OUTPUT/etc. 
chains actually exist.... do a iptables -nvL to confirm.

If so, then I think you are required to give an interface for the state to be 
effective. I have this on my firewall for this purpose:

-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT

Adrian


More information about the tfug mailing list