Page 1 of 1

Error on start CSF

Posted: 09 Feb 2018, 03:55
by Kurogane
I just notice i have an error when try to start CSF.

Here output.

Code: Select all

ACCEPT  all opt -- in eth1 out *  0.0.0.0/0  -> 0.0.0.0/0
ACCEPT  all opt -- in * out eth1  0.0.0.0/0  -> 0.0.0.0/0
ACCEPT  all opt    in eth1 out *  ::/0  -> ::/0
ACCEPT  all opt    in * out eth1  ::/0  -> ::/0
*ERROR* line:[957]
Command:[/sbin/iptables  -v -A LOGDROPIN -p tcp  -m limit --limit 30/m --limit-burst 5 -j LOG --log-prefix 'Firewall: *TCP_IN Blocked* ']
Error:[iptables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[958]
Command:[/sbin/iptables  -v -A LOGDROPOUT -p tcp --syn -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *TCP_OUT Blocked* ']
Error:[iptables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[959]
Command:[/sbin/iptables  -v -A LOGDROPIN -p udp  -m limit --limit 30/m --limit-burst 5 -j LOG --log-prefix 'Firewall: *UDP_IN Blocked* ']
Error:[iptables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[960]
Command:[/sbin/iptables  -v -A LOGDROPOUT -p udp -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *UDP_OUT Blocked* ']
Error:[iptables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[961]
Command:[/sbin/iptables  -v -A LOGDROPIN -p icmp -m limit --limit 30/m --limit-burst 5 -j LOG --log-prefix 'Firewall: *ICMP_IN Blocked* ']
Error:[iptables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[962]
Command:[/sbin/iptables  -v -A LOGDROPOUT -p icmp -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *ICMP_OUT Blocked* ']
Error:[iptables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[964]
Command:[/sbin/ip6tables  -v -A LOGDROPIN -p tcp  -m limit --limit 30/m --limit-burst 5 -j LOG --log-prefix 'Firewall: *TCP6IN Blocked* ']
Error:[ip6tables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[965]
Command:[/sbin/ip6tables  -v -A LOGDROPOUT -p tcp --syn -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *TCP6OUT Blocked* ']
Error:[ip6tables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[966]
Command:[/sbin/ip6tables  -v -A LOGDROPIN -p udp  -m limit --limit 30/m --limit-burst 5 -j LOG --log-prefix 'Firewall: *UDP6IN Blocked* ']
Error:[ip6tables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[967]
Command:[/sbin/ip6tables  -v -A LOGDROPOUT -p udp -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *UDP6OUT Blocked* ']
Error:[ip6tables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[968]
Command:[/sbin/ip6tables  -v -A LOGDROPIN -p icmpv6 -m limit --limit 30/m --limit-burst 5 -j LOG --log-prefix 'Firewall: *ICMP6IN Blocked* ']
Error:[ip6tables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[969]
Command:[/sbin/ip6tables  -v -A LOGDROPOUT -p icmpv6 -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *ICMP6OUT Blocked* ']
Error:[ip6tables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[2892]
Command:[/sbin/iptables  -v -A INPUT -i eth0 -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT]
Error:[iptables: No chain/target/match by that name.]
You should check through the main output carefully

*ERROR* line:[2898]
Command:[/sbin/iptables  -v -A INPUT -i eth0 -p icmp --icmp-type echo-reply -m limit --limit 1/s -j ACCEPT]
Error:[iptables: No chain/target/match by that name.]
You should check through the main output carefully
How i can solve this issue

Re: Error on start CSF

Posted: 13 Feb 2018, 12:41
by Elizine
That suggests you are missing the required ip6tables owner module in the kernel you are running. You need to either resolve that issue,or disable the SMTP_BLOCK option in csf.