iptables进行ip伪装的时候总是出错?

铁凝

我参照别人的贴子扩展了一下iptables的功能(netfilter/iptables模块编译及应用)
iptables功能是扩展了,而且能用. 但是我用iptables进行ip伪装的时候, 总是出现下面的情况:

-bash-2.05b# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables: No chain/target/match by that name
-bash-2.05b#

请问这是什么原因啊! 现在无法共享上网了! 我的iptables版本是1.3.3

lanmine

没问题,你的命令没有问题,modprobe -l 看看结果,是否正确的模块加入到内核

解决办法,重新编译内核,升级iptables,我至今没有明白,www.netfilter.org上
project 下:

libnfnetlink

libnetfilter_log

libnetfilter_queue

libnetfilter_conntrack

conntrack

ipset

nf-hipac

patch-o-matic-ng

这些和iptables什么关系,最新的iptables加最新的内核就包含了以上所有模块吗?

[ 本帖最后由 lanmine 于 2005-12-14 09:12 编辑 ]

lanmine

faq:

这是netfilter上faq里的一条错误信息提示:

'iptables: Invalid argument' after kernel update (nat table)

You have just upgraded your kernel and suddenly some of the commands (especially in the 'nat' table), and you experience something like:

# iptables -A POSTROUTING -t nat -o ppp0 -j MASQUERADE
iptables: Invalid argument


This happens when the structure size between kernel and userspace changes. You will need to recompile the iptables userspace program using the include files of your new kernel. This only happens if you (or the vendor of your kernel) has applied some patches either only to the old or only to the new kernel. It is not supposed to happen between vanilla kernel.org kernels. If it does, please inform the netfilter-devel mailinglist.