Re: Shorewall HOW-TO & VPS Question

Tom Eastep
Sun, 20 Jun 2004 16:32:44 -0000

Tom Eastep wrote:

>> + iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
>> iptables: No chain/target/match by that name
>>
>
> Looks like there is no state match support in the kernel -- Shorewall
> won''t run without it.

It may be that module autoloading is disabled in the kernel -- try
"modprobe ipt_state"; if that works, you can add:

	loadmodule ipt_state

to /etc/shorewall/modules (you will probably have to add more as you go
along).