Linode Forum
https://forum.linode.com/

iptables: Applying firewall rules: iptables-restore FAILED
https://forum.linode.com/viewtopic.php?f=19&t=11533
Page 1 of 1

Author:  tedaz [ Wed Jan 14, 2015 11:42 pm ]
Post subject:  iptables: Applying firewall rules: iptables-restore FAILED

VPS OS: CentOS 6

I added below lines in the "/etc/sysconfig/iptables"

Code:
-A INPUT -p udp --dport 500 -j ACCEPT
-A INPUT -p udp --dport 4500 -j ACCEPT
-t nat -A POSTROUTING -s 10.12.0.0/24 -o eth0 -j MASQUERADE
-A FORWARD -s 10.12.0.0/24 -j ACCEPT


Then the command "service iptables restart" said:
iptables: Setting chains to policy ACCEPT: security raw nat[ OK ]filter
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: iptables-restore: line 3 failed
[FAILED]


It seem that the POSTROUTING line encountered errors.
Would you please help me check this issue and give me some suggestion on it?

Author:  Vance [ Fri Jan 16, 2015 1:25 am ]
Post subject:  Re: iptables: Applying firewall rules: iptables-restore FAIL

-t nat is not valid syntax for iptables-restore. You need to find the *nat section in /etc/sysconfig/iptables and add your rule there. Something like this:
Code:
...
# Completed on Fri Aug 29 13:05:29 2014
# Generated by iptables-save v1.3.5 on Fri Aug 29 13:05:29 2014
*nat
:PREROUTING ACCEPT [22068:3016900]
:POSTROUTING ACCEPT [38126:2628174]
:OUTPUT ACCEPT [38390:2644260]
-A POSTROUTING -s 10.12.0.0/24 -o eth0 -j MASQUERADE
COMMIT
...

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/