I'm encountering a known problem with IPtables. I set up rules and apply them, restarting firewall, then I get this message:
Flushing firewall rules: [ OK ]
Setting chains to policy ACCEPT: raw nat mangle filter [ OK ]
Applying iptables firewall rules: [ OK ]
Loading iptables additional modules: ip_conntrack_ftp ip_conntrack_netbios_ns [FAILED]
IP Tables Comment Module Causes COMMIT Fail
/etc/sysconfig/iptables:
*filter
:CHAIN_X - [0:0]
[code]....
When I try to load the Realtek 8187 modules to kernel using the ./wlan1up command, I get the following error:
[root@localhost rtl8187_linux_26.1025.0328.2007]# ./wlan1up
insmod: error inserting 'ieee80211_crypt-rtl.ko': -1 File exists
[code]...
Can someone tell me how to correct the "Invalid module format"? I hope that correcting the "Invalid module format" error, I will not have the "Unknown symbol in module" error.
Note: I am using wlan1 for this module as I previously am online with the wlan0 network.The same error occurs if I use ./wlan0up.
I installed svn. it works but apache can't load modules
i installed svn using yum :
#yum install subversion mod_dav_svn
I'm a newbie in the world of netfilter/iptables. I've read an article about iptables and rate limit module:
Code: iptables -A INPUT -p ICMP --icmp-type echo-request -m limit --limit 1/minute --limit-burst 5 -j ACCEPT The firewall will let the first 5 packets in in the first minute, -limit-burst 5; this means, however, that the packets/minute now is 5, so any further packets are blocked until packets/minute = 1, i.e. 5 minutes later. In the sixth minute, packets/minute will be 5/6 < 1, so another ping request will be let in. When the extra ping request is admitted, the ratio becomes 6/6 = 1 again, and packets are DROPped again until the next minute.
Now I have some problems in understanding how it works.
For example: I want ping google.com in this way: the kernel firewall permits to send the first 5 packet to google.com (--limit-burst 5) and then it blocks the remaining packets for 5 minutes. At sixth minute (because I wish a limit rate equal to 1/minute: --limit 1/minute) one packet can send to google again. And so on.
So my rule should be:
Code: iptables -A OUTPUT -d url_of_google -p icmp --icmp-type echo-request -m limit --limit 1/minute --limit-burst 5 -j ACCEPT In this way, if i digit
Code: ping -f url_of_gogle I expect that the first 5 packets are accepted (and so zero '.' will print on the screen) and then for the remaining 5 minutes no one packets will be accepted (and so a long string of '.' will print). But it doesn't work...
In man pages of ping we read (about -f option):
-f Flood ping. Outputs packets as fast as they come back or one hundred times per second, whichever is more. For every ECHO_REQUEST sent a period ``.'' is printed, while for every ECHO_REPLY received a backspace is printed. This provides a rapid display of how many packets are being dropped.
I need to know I/O stats per process. When executed dstat give the bellow error message.
dstat -M topio -d -M topbio
Module topio failed to load. (No module named dstat_topio)
Module topbio failed to load. (No module named dstat_topbio)
CentOS release 5.3 (Final)
uname -r => 2.6.18-128.2.1.el5
How to resolve the above error message
Trying to setup my box as a router on Ubuntu 10.04. When trying to setup a NAT rule in iptables 1.4.4 like so:
Code:
sudo iptables --table NAT --append POSTROUTING -o eth0 -j MASQUERADE
I keep getting:
Code:
Can't initialize iptables table 'NAT': Table does not exist (do you need to insmod?)
Looking at lsmod, it doesn't look like I have anything NAT related loaded ( I just have iptable_filter, ip_tables, and x_table ). Doing a locate nat, I find a module that looks like it should work. I'm running 10.04.1 LTS - Kernel is 2.6.32-25-generic #45-Ubuntu SMP and it is pretty much stock - haven't done anything fancy... this module looks promising:
Code:
/lib/modules/2.6.32-25-generic/kernel/net/ipv4/netfilter/iptable_nat.ko
but loading it and I get:
Code:
-1 Unknown symbol in module
I'm running Fedora 12 LXDE spin on a netbook (Asus EeePC) and have successfully installed a wireless driver using ndiswrapper. The only problem is that every time I reboot, I need to use the "modprobe ndiswrapper" command to load the module.
Is there a way to load the ndiswrapper module during the boot process?
I have a WS- something or other by gigabyte, it has the "ralink rt2860" chipset according to lspci.
It works well the only problem is in kismet or airodump-ng the power always shows as 0.
In the kismet.conf i had to set the source to rt2500, it does not seem to like rt2860 or rt2x00.
In airodump-ng it always says "chipset: ralink 2560pci" and "driver:rt2500"
Is there any way i can use the rt2x00 drivers, would they allow for more things ?
Whats funny is that network manager can see the signal strenght of all the sources.
I'm trying to create new RAM image file to get my server load raid1 module upon start, I was following redhat documentation & it suggested to use the following command mkinited --with=raid1 inited-raid1-$(uname -r).img $(uname -r) However after running this command I'm getting this message No Kernel available for 'inited-2.6.18-128.el5"
View 4 Replies View Related64bit Slack doesn't recognize my ethernet device. ifconfig -a show no eth0. It's an onboard nvidia MCP55 ethernet nic. Never had this problem using 32 bit Slack.
When I try to modprobe forcedeth I get the following error:
repeats those two statements 3 times
I just recompiled my kernel with every possible 10/100 ethernet device included in the modules. Still no go.
I am interested in using fortran and an external library called matio used to save arrays to matlab .mat files. I have installed the matio and matio-dev packages from synaptics but i cannot compile a code receiving an error Code: christos@christos-laptop:~/Desktop$ gfortran -o test test.f90 -lmatio -lz test.f90:2.13: USE MATIO 1
Fatal Error: Can't open module file 'matio.mod' for reading at (1): No such file or directory How can i load a module in order to use it in fortran through the GCC compiler?
i installed firefox 4 and removed the old 3.X version. did a general update that my computer showed me was available then i noticed the first problem. firefox 4 would not launch when i clicked it, it would only launch when i clicked the gnome 3 applications button and then clicked and dragged the firefox logo to the desktop, then it opened. the second problem i am now having which at the moment is more bothersome is that after i closed the lid to my laptop and opened it up again after a while and logged back in and noticed that the ENTIRE gnome 3 environment was gone. no panel no menu nothing just the desktop and a few desktop icons. i tried the command "yum install gnome-shell" but it just sed that gnome 2.31.5-7 .fc14.i686 was already installed so it wasnt gonna do anything, then i tried the "gnome-shell --replace" command and it just said
failed to load "canberra-gtk-module": libcanberra-gtk-module no such file or directory.
I've installed openSuse 11.4 server-mode (text only) on my desktop, and I'm trying to configure IceWM so i'll eventually have it set up so it always boots into text only mode, but I could be able to quickly start icewm via the command line.using Yast, I installed the Xorg server, and icewm.when I type X, the screen goes black and it just doesn't seem to do anythingI found if I hit ctrl+alt+f1 it kinda puts me back into text only mode, but I can't put in commands anymore. The last thing it says on the screen is:
Failed to load module "fglrx" (module does not exist, 0)
I've goggled that error message and the discussions that popped up around it made no sense to me at all. I've never configured X from scratch before, can someone point me towards a tutorial or something?
explain about Apache fail over by using Heartbeat on CentOS 5. i tried it but it is not working.
View 3 Replies View RelatedI cannot find the Xorg configuration file on my newly installed Debian on my tablet-pc, so I followed this tutorial [URL] and ran the command "Xorg -configure", to which I got the following error messages:
(EE) Failed to load module "vmwgfx" (module does not exist, 0)
(EE) vmware: Please ignore the above warnings about not being able to load module/driver vmwgfx
(++) Using config file: "/root/xorg.conf.new"
(==) Using system config directory "/usr/share/X11/xorg.conf.d"
[code]...
When opening gedit as a user I get the following message
Gkt-message: Failed to load module "'pk-gtk-module"
If I try to open gedit as root I get the same message but with other messages. These are shown in the attached file. gtk.txt
This is on an upgraded machine using the preupgrade method. The same has happened on two machines upgraded from F14 to F15 the same way. 64 bit systems.
How to clean this up so the messages do no appear?
Problem: computer and graphics card had been running for months without problem. For some reason, last night, things locked up...wouldn't think it's related, but happened when I noticed I was locked out of creating new folders on my usb attached My Book storage drive. So, from terminal I tried to sudo change permissions to read/write. Everything locked up. Now, every time I reboot it states needing to use low graphics mode "Screen, graphics card, and input device settings could not be detected correctly."
When I check the error log I see: "(EE) Failed to initialize the NVIDIA kernel module.."(EE) NVIDIA(0): ***Aborting* Screens found but none have a usable configuration. Fatal Server Error - no screens found"
If I try to then start in safe low graphics mode or restart X, I get the Ubuntu splash screen with the 5 dots that turn red to show progress...but nothing ever happens. I can switch to VT 1, login at command line, and type "startx" and then the graphical desktop loads just fine. Video playback, etc. is perfect and fine - not in low graphics mode at all. System seems totally normal.
However, I have to go through these steps each time I reboot. Also, I noticed that when I try to boot from Ubuntu Live CD I can't. I get as far as picking English as a language, then screen goes blank and goes to power saving mode (no signal being sent). This greatly concerns me as even though I have a work around for now - getting to command line then startx'ing - if I ever needed to reinstall from the CD, it seems I can't.
Some info on my pc:Running 10.04 on Compaq Presario SR1950NX AMD 64 GeForce 6150 LE/PCI/SSE2/3DNow! <- believe built onto motherboard on what I can do to fix? Is this a sign that something is wrong with my video card?
So I have been trying to install these drivers forever and after going through a million forum posts and Google searches I have been unsuccessful. The process I have been trying starts as such: I hit ctrl-alt-f1 and then login as root. i then change to run level 3 by doing /sbin/init 3. After that's done I cd to desktop and do sh NVIDIA-LINUX-x86-185.18.29-pkg1.run --kernel-source-path /usr/src/kernel/2.6.18-128.2.1.el15-i686
If I don't give it the source path it can't find the source tree. Eventually I get the error: ERROR: Unable to load the kernel module 'nvidia.ko'. This happens most frequently when this kernel module was built against the wrong or improperly configured kernel sources, with a version of gcc that differs from the one used to build the target kernel, or if a driver such as rivafb/nvidiafb is present and prevents the NVIDIA kernel module from
[Code]...
When I try something like, I get:
iptables -A FORWARD -p udp -m length --length 39 -m u32 --u32 '27&0x8f=7' --u32 '31=0x527c4833' -j DROP
iptables: No chain/target/match by that name.
So I re-compiled the kernel enabling WAN Router, and all the subsections. Downloaded latest iptables, removed the RPM one, installed the iptables from source.. Guess what, same error!
PS: iptables -m u32 -h works, it displays a page of info.
I have a strange problem with IpTables.after a server reboot, the complete rule-list of iptables is empty. After a manually start, all my old rules are there again.I checked chkconfig if autostart of iptables is enabled:chkconfig --list iptablesiptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off
View 2 Replies View RelatedI'm at my wits end at this point.
CentOS 5
iptables 1.4.1.1
APF 9.7
Webmin 1.4.80 (yes i can be a gui noob at times)
I'm currently running a dedicated server that hosts a couple of sites and runs a game server or two. I was using iptables on its own for a while, but recently I'm a target of all sorts of attacks (typically aimed directly at the gameserver on port 7777. UDP flood attacks, etc). I'm also seeing an spike in foreign spam, SSH brutes, and a few people in Turkey thought it would be cute to download files over and over and over I have decided to start banning entire countries, using the subnets listed here [URL]... I'm trying to block Central and South america (189,190,200,201.x.x.x), China, Ukraine, Turkey, Iran, Spain and Italy. I do this because a majority of the traffic from those areas are usually up to no good.
I installed APF so I could easily add these ranges in deny_hosts.rules and be done with it. I added the ranges, which turned out to be too many, and the system tanked. I decreased the amount of ranges to just 4:
189.0.0.0/8
190.0.0.0/8
200.0.0.0/8
201.0.0.0/8
Restarted APF and it loaded fine. Do an apf --list and iptables --list and it shows those 4 ranges as blocked. The only issue...I have people from 190.x and 200.x connecting to the gameserver and PLAYING. Its as if the firewall isnt there. Also, adding those ranges to /etc/hosts.deny (or whatever) doesn't block them either.
I add one of my own ips and I get blocked instantly. WTF?? I look in the iptables for webmin, and it shows an empty firewall. I do iptables --list and it shows the ranges I added in APF. I'm looking at building (or whatever its called) an fresh iptables with the geoip module added in. [URL]...
I've never done anything like this, and I don't want to kill the box. I also don't want to spend the effort if 1) something is wrong with my system to begin with and 2) the geoip module doesn't work. geoip module aside....how exactly should i configure the firewall? Empty iptables completely and then rely on APF for everything? Oh and heres another tidbit: I tried this before 2 years ago and it used to be that anything I put in APF would show when i looked at iptables using the webmin module. Thats no longer the case now. That was also on CentOS 4 when it did that. I don't know if moving to 5 is whats preventing it now.
In a nutshell, I'm new at this and I'm being inundated with terrible people trying to do terrible things and I'm ready to just give up. Can someone just give me a quick rundown on:
1) how to test that my firewall is actually firewalling
2) how I should configure the/a firewall on this CentOS5. Not too specific, I just want to know if I should empty iptables then load apf, should i not bother with APF (i like it when it works), is there a specific order of doing things?
The problem I am having is that iptables won't load the required modules for my firewall rules.
iptables -F
iptables -P INPUT DROP
iptables -P FORWARD DROP
[code]....
I have big problem with correct settings of iptables as a router. My network topology (UTM Hardware router) 192.168.1.1--->eth0 192.168.1.2(centos with apache ftp and transparent squid 8080)--->eth1 192.168.0.1(LAN with dhcp)
eth0=WAN 192.168.1.2
eth1=LAN 192.168.0.1
I have problem with hanging connections through squid which are very slow or connection failed. Sometimes i received DNS timeout error from squid stable 2.6 21
[Code]...
I'm trying to redirect the requests from port 80 to ports 8080 and 8081 through iptables because I've got two services which need accept requests from the same port(80):
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080-8081
The problem is that the second port (8081) never gets a request, just the first one.
How I add this " iptables -F " to my Servers boot I already asked this from my Provider, but it seams he forget each time I ask.
View 3 Replies View RelatedLoaded up Centos 5.5 final. Configured iptables to block regions of the world based on networks. An example would be:
-A INPUT -s 139.82.0.0/16 -j DROP
My /etc/sysconfig/iptables file contains about 10k entries like this. If I use this, the machine lags hardcore network wise.
I have the requirement that if our website receives 20 or more requests within 60 seconds, to block the offending IP address for 5 minutes, then allow them access again. My only certain mechanism to do this is iptables. I wrote the following series of commands:
iptables -N RATE_CHECK
iptables -N DOSAttack
iptables -N RemoveBlock
[code]...
I am limited in my testing, but the little I have been able to test seems to be having no effect. will the above commands have the desired effect.
To expand: I'm trying to set up a box with l7-filter, and I need to patch and compile iptables 1.4.1.1 as part of the process. I ./configured it with the prefix= argument so it would install into /sbin instead of /usr/sbin, and I did a yum remove iptables before installing it so as not to get in the way of the original iptables, but I'm wondering if this is really necessary - it's kind of annoying, because removing the original iptables removes the init.d script, deregisters the service, etc. If I don't, is it possible that iptables 1.4.1.1 might get overwritten in a system update or something, or will yum see that I've got a custom/newer version in there and leave it be?
View 4 Replies View RelatedHow can I enable the statistic module in iptables?
I have
Fedora13 32 bits
iptables-1.4.7-2
kernel 2.6.18