Linode Forum
https://forum.linode.com/

iptables on fedora issue: security raw nat[FAILED]filter
https://forum.linode.com/viewtopic.php?f=19&t=8079
Page 1 of 1

Author:  wagopia [ Sat Nov 19, 2011 10:38 pm ]
Post subject:  iptables on fedora issue: security raw nat[FAILED]filter

I'm having a similar problem as here:

http://www-loadbal2.linode.com/forums/v ... f6f96f096d

This is a new Fedora 14 32-bit node. When I issue `/etc/init.d/iptables restart` I get this:

Code:
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Setting chains to policy ACCEPT: security raw nat[FAILED]filter
iptables: Unloading modules:                               [  OK  ]


When I issue `iptables -L -n -v` I get:

Code:
Chain INPUT (policy ACCEPT 186 packets, 13395 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 135 packets, 23047 bytes)
 pkts bytes target     prot opt in     out     source               destination 


There is no /etc/sysconfig/iptables or a /etc/sysconfig/iptables.save, so there are no saved rules interfering here. I've tried a reboot and the issue is still happening. Grrr.

Any help appreciated. Thanks!

Author:  wagopia [ Sat Nov 19, 2011 10:40 pm ]
Post subject: 

If it helps, when I issue `/etc/init.d/iptables status` I get:

Code:
Table: security
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination         

Table: raw
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination         

Table: nat
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination         

Table: mangle
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination         

Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination         

Author:  wagopia [ Sat Nov 19, 2011 10:43 pm ]
Post subject: 

On a side note, it seems that start/stop/restart all seem to work right. I just don't like seeing FAILED. :(

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/