OpenVZ Forum - RDF feed
type: channel
items: *SOLVED* iptables: No chain/target/match by that name
items: Re: iptables: No chain/target/match by that name
items: !!!UNSOLVED!!! hashlimit problems!

*SOLVED* iptables: No chain/target/match by that name
type: item
description: I want to install a firewall in the VPS such as APF, but get "No chain/target/match by that name" errors When I do a simple test in the VPS: iptables -A INPUT -p tcp --dport 22 -j ACCEPT then this error occurs: iptables: No chain/target/match by that name I've seen more topics in this forum, I tried all the tips but without any luck. I'm get rather desperate because I can't discover what is wrong. Here the information on the HN. It's a Linux Fedora FC 5 distro with a 2.6.16-026test015.2 kernel. 0. Status iptables ================== [root@localhost ~]# service iptables status Table: nat Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Table: mangle Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination Table: filter Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination 1. lsmod before the VPS starts ============================== [root@localhost ~]# lsmod | grep ipt iptable_nat 7940 0 ip_nat 13780 3 vzrst,ip_nat_ftp,iptable_nat iptable_mangle 3680 0 iptable_filter 3200 0 ip_conntrack 47688 6 vzrst,vzcpt,ip_nat_ftp,iptable_nat,ip_nat,xt_state ip_tables 12184 3 iptable_nat,iptable_mangle,iptable_filter ipt_LOG 6176 0 ipt_TOS 2016 0 ipt_ttl 1568 0 ipt_TCPMSS 3648 0 ipt_multiport 2336 0 ipt_tos 1344 0 ipt_REJECT 4288 0 x_tables 13056 13 iptable_nat,xt_state,ip_tables,ipt_LOG,ipt_TOS,xt_length,ipt _ttl,xt_tcpmss,ipt_TCPMSS,ipt_multiport,xt_limit,ipt_tos,ipt _REJECT 2. cat /etc/sysconfig/vz ======================== [roo…
creator: fransonline
date: 2006-11-18T12:45:56-00:00

Re: iptables: No chain/target/match by that name
type: item
description: Hello, can you, please, try recent kernel (2.6.16-026test020.1) on your node, to be sure that we're not dealing with some old issue? Also, can you provide remote access to your node? If no - it is ok. Thanks.
creator: Vasily Tarasov
date: 2006-11-18T12:56:36-00:00

Re: iptables: No chain/target/match by that name
type: item
description: Hello Vasily, Thanks for your fast reply. 1. Sorry but I don't see kernel 2.6.16-026test020.1 ??? http://openvz.org/download/kernel/fc5/ says: OpenVZ Fedora Core 5 kernel (latest is 2.6.16-1.2133_FC5.026test015) 2. Of course I would like you to log in, but this is not possible at this box, because it's a test enverimoent at home. This, because I have exact the same problem with my public server with kernel 2.6.16-1.2133_FC5.026test015smp. So if you want to log in in this box I would like to provide you with a root login (if so, where do I have to send the details?) I appreciate your help very much because i am struggling with the problem for some weeks now. Frans
creator: fransonline
date: 2006-11-18T13:36:44-00:00

Re: iptables: No chain/target/match by that name
type: item
description: Ohhh, sorry I didn't understand you right at the first time. So you're using 2.6.16-1.2133_FC5.026test015 kernel, OpenVZ kernel based on FC5... This kernel is prity old and probably obsolete. Please, try to use not FC5 based kernel, for example this: http://openvz.org/download/kernel/devel/archives/2.6.16-026t est020.1 Meanwhile I will check FC5 OVZ kernel. Thanks!
creator: Vasily Tarasov
date: 2006-11-18T13:52:22-00:00

Re: iptables: No chain/target/match by that name
type: item
description: Hi, I remove the old FC kernel and replaced it with 2.6.16-026t est020.1, rebooted the system. But with the same iptables problem. Frans
creator: fransonline
date: 2006-11-18T14:19:01-00:00

Re: iptables: No chain/target/match by that name
type: item
description: Sorry, for late answer. I'll be able to help you tomorrow, so, please, send me login to the node in question via PM (Private Message). Thanks, Vasily.
creator: Vasily Tarasov
date: 2006-11-19T10:51:43-00:00

Re: iptables: No chain/target/match by that name
type: item
description: The problem is because of the xt_tcpudp module. You need to load it manually before VE start.
creator: dim
date: 2006-11-20T07:57:24-00:00

Re: iptables: No chain/target/match by that name
type: item
description: Thnx, do i load it by modprobe xt_tcpudp on the HN?
creator: fransonline
date: 2006-11-20T08:08:34-00:00

Re: iptables: No chain/target/match by that name
type: item
description: yes
creator: dim
date: 2006-11-20T08:20:31-00:00

Re: iptables: No chain/target/match by that name
type: item
description: With the commands: modprobe xt_tcpudp modprobe ip_conntrack ip_conntrack_enable_ve0=1 on the HN I think I solved the problem. Combined with the simple but effective preconfigured firewalls from http://vpsinfo.nixhost.net/firewall.htm the chain errors disappeared and the firewall works. The APF firewall still causes errors, may be I still will find a solution Vasily and Dim thanks for your time and help!
creator: fransonline
date: 2006-11-20T11:40:41-00:00

!!!UNSOLVED!!! hashlimit problems!
type: item
description: Excuse me... I know this Thread is too old... But I had the same probleme and i solved it with information of this thread I have now the same probleme with the command: Quote: :/etc/apache2/mods-available# iptables -I INPUT -m hashlimit -m tcp -p tcp --dport 22 --hashlimit 100/min --hashlimit-mode srcip --hashlimit-name ssh -m state --state NEW -j ACCEPT iptables: No chain/target/match by that name How to activate hashlimit on VPS? I'm sorry for my ugly english Greetz sucker
creator: sucker21
date: 2008-09-28T19:01:46-00:00