CSF: iptables unknown arg

[ResellerPlanet]

Hallo,

Hebben jullie ervaring met CSF (ConfigServer Firewall) op cPanel? Ik krijg namelijk de volgende iptables errors wanneer ik CSF probeer te starten:



Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Restarting bandmin acctboth chains for cPanel
ACCEPT all opt -- in lo out * 0.0.0.0/0 -> 0.0.0.0/0
ACCEPT all opt -- in * out lo 0.0.0.0/0 -> 0.0.0.0/0
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_IN Blocked* '
LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_OUT Blocked* '
LOG udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_IN Blocked* '
LOG udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_OUT Blocked* '
LOG icmp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_IN Blocked* '
LOG icmp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_OUT Blocked* '
LOG all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *BLOCK_LIST* '
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
INVDROP all opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 state INVALID
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x3F/0x00
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x3F/0x3F
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x03/0x03
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x06/0x06
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x05/0x05
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x11/0x01
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x18/0x08
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x30/0x20
INVDROP all opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 state INVALID
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x3F/0x00
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x3F/0x3F
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x03/0x03
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x06/0x06
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x05/0x05
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x11/0x01
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x18/0x08
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x30/0x20
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
LOGDROPIN all opt -- in eth+ out * 64.58.165.126 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 64.58.165.126
LOGDROPIN all opt -- in eth+ out * 216.105.216.5 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 216.105.216.5
LOGDROPIN all opt -- in eth+ out * 64.251.10.133 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 64.251.10.133
LOGDROPIN all opt -- in eth+ out * 89.149.240.26 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 89.149.240.26
LOGDROPIN all opt -- in eth+ out * 195.87.225.72 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 195.87.225.72
BLOCKDROP ...
...
SPAMHAUS all opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Flushing chain `BLOCKDROP'
Flushing chain `DSHIELD'
Flushing chain `INVDROP'
Flushing chain `LOGDROPIN'
Flushing chain `LOGDROPOUT'
Flushing chain `SPAMHAUS'
Flushing chain `acctboth'
Deleting chain `BLOCKDROP'
Deleting chain `DSHIELD'
Deleting chain `INVDROP'
Deleting chain `LOGDROPIN'
Deleting chain `LOGDROPOUT'
Deleting chain `SPAMHAUS'
Deleting chain `acctboth'
Error: iptables command [/sbin/iptables -v -I OUTPUT -p tcp --dport 25 -j ] failed, at line 544


Google, CSF forums en enkele andere forums geven mij bitter weinig informatie over dit probleem. Weet iemand hoe ik dit kan oplossen? Waarom iptables het argument "-j" niet aanvaardt? Het is een nieuwe server met een nieuwe CSF installatie. Ik heb dit probleem nooit eerder gehad op andere servers.

Dank bij voorbaat.

[dreamhost_nl]

Nog nooit zulke problemen gezien met CSF/LFD.
Probeer even het forum van CSF : http://forum.configserver.com/

[crazycoder]

Als je ook wazige fouten krijg als je iets als iptables -L doe dan heb je mogelijk de kernel niet goed gecompileerd.

[ResellerPlanet]

iptables -L geeft geen problemen. Het is dan ook een standaard CentOS 5 kernel.

De CSF "low" ruleset blijkt te werken, maar de "medium" ruleset niet...

[gjtje]

Zou het kunnen dat je kernel zonder packet filtering is gecompileerd? Of het is een module die je nog moet toevoegen.