On 9/29/2015 11:32 AM, Erich Titl wrote: > Hi Tom > > Am 29.09.2015 um 19:21 schrieb Tom Eastep: >> On 09/29/2015 08:27 AM, Jérôme Blion wrote: > ... > >>> >> >> Also, look in the system log -- the reason for failure is sometime >> logged by the kernel rather than being reported back by iptables-restore. > > You were right, switching to kernel 4.x I must be missing a few modules > > Sep 29 18:21:29 SALT kernel: [14140.725847] xt_CT: No such helper "amanda" > Sep 29 18:21:29 SALT kernel: [14140.796631] xt_CT: No such helper "snmp" > Sep 29 18:21:29 SALT kernel: [14140.831374] xt_CT: No such helper > "netbios-ns" > Sep 29 18:21:29 SALT kernel: [14140.866591] xt_CT: No such helper "RAS" > Sep 29 18:21:29 SALT kernel: [14140.919455] xt_CT: No such helper "sane" > Sep 29 18:21:29 SALT kernel: [14140.954523] xt_CT: No such helper "sane-0" > Sep 29 18:21:29 SALT kernel: [14140.990379] xt_CT: No such helper "irc" > Sep 29 18:21:29 SALT kernel: [14141.024987] xt_CT: No such helper "irc-0" > Sep 29 18:21:29 SALT kernel: [14141.060674] xt_CT: No such helper "tftp" > Sep 29 18:21:29 SALT kernel: [14141.095786] xt_CT: No such helper "tftp-0" > Sep 29 18:21:30 SALT kernel: [14141.443471] ipt_REJECT: Unknown symbol > nf_send_reset (err 0) > Sep 29 18:21:30 SALT kernel: [14141.443568] ipt_REJECT: Unknown symbol > nf_send_unreach (err 0) > Sep 29 18:21:31 SALT kernel: [14142.854136] ipt_REJECT: Unknown symbol > nf_send_reset (err 0) > Sep 29 18:21:31 SALT kernel: [14142.854233] ipt_REJECT: Unknown symbol > nf_send_unreach (err 0) > > Will have to dig for the kernel modules >
Also looks like there may be a problem with the ipt_REJECT module. The 'no such helper' messages are probably being generated when the compiler is probing your system to determine its capabilities. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
