Mar 032010
 

I recently upgraded kernel of my linux server. After this, APF Firewall stopped working. It give error message on starting firewall.

[[email protected] apf]# apf -s
Unable to load iptables module (ipt_state), aborting.
[[email protected] apf]#

The problem is due to module ipt_state is no longer exists, the name is changed to xt_state. On the server, the module is available at

/lib/modules/2.6.17.6/kernel/net/netfilter

The error can be fixed by editing /etc/apf/internals/functions.apf

vim /etc/apf/internals/functions.apf

FIND

ml ipt_state 1
ml ipt_multiport 1

REPLACE WITH

ml xt_state
ml xt_multiport

Now start apf with apf -r, firewall now works. Yea!

 Posted by at 6:34 am

 Leave a Reply