Blog

I recently upgraded kernel of my linux server. After this, APF Firewall stopped working. It give error message on starting firewall.

[root@server10 apf]# apf -s
Unable to load iptables module (ipt_state), aborting.
[root@server10 apf]#

The problem is due to module ipt_state is no longer exists, the name is changed to xt_state. On the server, the module is available at

/lib/modules/2.6.17.6/kernel/net/netfilter

The error can be fixed by editing /etc/apf/internals/functions.apf

vim /etc/apf/internals/functions.apf

FIND

ml ipt_state 1
ml ipt_multiport 1

REPLACE WITH

ml xt_state
ml xt_multiport

Now start apf with apf -r, firewall now works. Yea!