- 论坛徽章:
- 0
|
2.6.11的内核,编译kernel添加了ipt_time.ko和iptconmlimit.ko,
现在iptables无法启动
[root@sgfw sysconfig]# service iptables status
Firewall is stopped.
执行restart和start均无反应
[root@sgfw sysconfig]# service iptables restart
[root@sgfw sysconfig]# service iptables start
[root@sgfw sysconfig]# iptables -v
iptables v1.3.3: no command specified
Try `iptables -h' or 'iptables --help' for more information.
添加策略可以生效
[root@sgfw sysconfig]# iptables -P FORWARD DROP
[root@sgfw sysconfig]# iptables -nvL
Chain INPUT (policy ACCEPT 67 packets, 5496 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 42 packets, 4608 bytes)
pkts bytes target prot opt in out source destination
[root@sgfw sysconfig]# lsmod
Module Size Used by
iptable_filter 2881 0
ip_tables 19521 1 iptable_filter
md5 4033 1
ipv6 268097 10
dm_mod 58101 0
video 15941 0
button 6609 0
battery 9413 0
ac 4805 0
shpchp 94405 0
i2c_piix4 8657 0
i2c_core 21569 1 i2c_piix4
pcnet32 36165 0
mii 5441 1 pcnet32
floppy 65269 0
ext3 132553 1
jbd 86233 1 ext3
BusLogic 79445 2
sd_mod 20545 3
scsi_mod 148105 2 BusLogic,sd_mod
[ 本帖最后由 zsgd 于 2006-4-5 17:14 编辑 ] |
|