Gettting an error in iptables with redhat 7.1 and IM LOST!

[ForumKid]

[root@mymachine /sbin]# ./iptables -A INPUT -s 0/0 -d 65.198.122.111 -p icmp --icmp-type echo-request -j DROP
/lib/modules/2.4.2-2smp/kernel/net/ipv4/netfilter/ip_tables.o: init_module: Device or resource busy
Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters
/lib/modules/2.4.2-2smp/kernel/net/ipv4/netfilter/ip_tables.o: insmod /lib/modules/2.4.2-2smp/kernel/net/ipv4/netfilter/ip_tables.o failed
/lib/modules/2.4.2-2smp/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables failed
iptables v1.2.1a: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.


Does anyone know what this means?

 

[ifincham]

Hi,







Well firstly, stating the obvious perhaps, but do you have the iptables modules on your system, i.e.


ls -l /lib/modules/2.4.2-2smp/kernel/net/ipv4/netfilter





If so, then I'd assume you have ipchains active. You can't run both at the same time and redhat ships by default with an ipchains firewall active (lokkit). Try to do the following and then re-do your iptables :







/etc/rc.d/init.d/ipchains stop



/sbin/chkconfig --level 2345 ipchains off







Hopefully you should then be able to modprobe or insmod iptables modules and use that instead.







Regards

 

[marsd]

It's a 2.4 kernel.
ipchains works badly and usually requires a
custom compile to function at all with 2.4.

Run a lsmod to see what is loaded: maybe you do have
an ipchains active system, which would mean that you
are looking at a recompile, because ipchains and netfilter
are not compatible.
On the other hand your kernel may not have firewall
support compiled in == no iptables.o., when you look for
it, or possibly, it has been destroyed,removed,corrupted.

If these things check out then there are some issues with
the VM(kernel) in early 2.4 that could report a mem error
of this sort, possible issues with the nic driver
(what card?) and some versions of the iptables
(TOOL) were buggy.
All of these issues need to be checked.

I did find one site,(in japanese), that may be on topic
but I am not babelfishing today.

ppfh028.cisnet.or.jp/archiver/fj/os/linux/200107/msg00494.ht

 

[Guest_imported]

Ifincham was on the right track, but he stopped short of the fix (for my situation anyway).

After you've stopped ipchains and used chkconfig to turn it off, you need to
rmmod ipchains
to actually remove the module from memory.

I believe that once you've restarted it would be unloaded anyway, but if you want to get rid of ipchains and plug away at iptables without restarting, you need to unload the module. This completely cleared up that error for me.

Regards
Simon