Arch Linux

Tharbad

Member

Registered: 2016-02-27

Posts: 270

[Solved] iptables kernel module not found

Hi everyone,

I'm using gufw (GUi for ufw). Sometime last week, after a kernel update (4.4.5-1-ARCH), ufw won't start due to teh following error:

Error running: /usr/sbin/ufw allow in proto udp from any to any port 49027 > ERROR: initcaps | [Errno 2] iptables v1.4.21: can't initialize iptables table `filter': 
Table does not exist (do you need to insmod?) | Perhaps iptables or your kernel needs to be upgraded.

I've searched the kernel modules dir for iptables modules and it's not there.

Those are the modules I have in /lib/modules/4.4.5-1-ARCH/kernel/net/netfilter

ipset                             nfnetlink_cttimeout.ko.gz  xt_connlabel.ko.gz    xt_nfacct.ko.gz
ipvs                              nfnetlink.ko.gz            xt_connlimit.ko.gz    xt_NFLOG.ko.gz
nf_conntrack_amanda.ko.gz         nfnetlink_log.ko.gz        xt_connmark.ko.gz     xt_NFQUEUE.ko.gz
nf_conntrack_broadcast.ko.gz      nfnetlink_queue.ko.gz      xt_CONNSECMARK.ko.gz  xt_osf.ko.gz
nf_conntrack_ftp.ko.gz            nf_synproxy_core.ko.gz     xt_conntrack.ko.gz    xt_owner.ko.gz
nf_conntrack_h323.ko.gz           nf_tables_inet.ko.gz       xt_cpu.ko.gz          xt_physdev.ko.gz
nf_conntrack_irc.ko.gz            nf_tables.ko.gz            xt_CT.ko.gz           xt_pkttype.ko.gz
nf_conntrack.ko.gz                nf_tables_netdev.ko.gz     xt_dccp.ko.gz         xt_policy.ko.gz
nf_conntrack_netbios_ns.ko.gz     nft_compat.ko.gz           xt_devgroup.ko.gz     xt_quota.ko.gz
nf_conntrack_netlink.ko.gz        nft_counter.ko.gz          xt_dscp.ko.gz         xt_rateest.ko.gz
nf_conntrack_pptp.ko.gz           nft_ct.ko.gz               xt_DSCP.ko.gz         xt_RATEEST.ko.gz
nf_conntrack_proto_dccp.ko.gz     nft_exthdr.ko.gz           xt_ecn.ko.gz          xt_realm.ko.gz
nf_conntrack_proto_gre.ko.gz      nft_hash.ko.gz             xt_esp.ko.gz          xt_recent.ko.gz
nf_conntrack_proto_sctp.ko.gz     nft_limit.ko.gz            xt_hashlimit.ko.gz    xt_REDIRECT.ko.gz
nf_conntrack_proto_udplite.ko.gz  nft_log.ko.gz              xt_helper.ko.gz       xt_sctp.ko.gz
nf_conntrack_sane.ko.gz           nft_masq.ko.gz             xt_hl.ko.gz           xt_SECMARK.ko.gz
nf_conntrack_sip.ko.gz            nft_meta.ko.gz             xt_HL.ko.gz           xt_set.ko.gz
nf_conntrack_snmp.ko.gz           nft_nat.ko.gz              xt_HMARK.ko.gz        xt_socket.ko.gz
nf_conntrack_tftp.ko.gz           nft_queue.ko.gz            xt_IDLETIMER.ko.gz    xt_state.ko.gz
nf_log_common.ko.gz               nft_rbtree.ko.gz           xt_ipcomp.ko.gz       xt_statistic.ko.gz
nf_nat_amanda.ko.gz               nft_redir.ko.gz            xt_iprange.ko.gz      xt_string.ko.gz
nf_nat_ftp.ko.gz                  nft_reject_inet.ko.gz      xt_ipvs.ko.gz         xt_tcpmss.ko.gz
nf_nat_irc.ko.gz                  nft_reject.ko.gz           xt_l2tp.ko.gz         xt_TCPMSS.ko.gz
nf_nat.ko.gz                      x_tables.ko.gz             xt_LED.ko.gz          xt_TCPOPTSTRIP.ko.gz
nf_nat_proto_dccp.ko.gz           xt_addrtype.ko.gz          xt_length.ko.gz       xt_tcpudp.ko.gz
nf_nat_proto_sctp.ko.gz           xt_bpf.ko.gz               xt_limit.ko.gz        xt_TEE.ko.gz
nf_nat_proto_udplite.ko.gz        xt_cgroup.ko.gz            xt_LOG.ko.gz          xt_time.ko.gz
nf_nat_redirect.ko.gz             xt_CHECKSUM.ko.gz          xt_mac.ko.gz          xt_TPROXY.ko.gz
nf_nat_sip.ko.gz                  xt_CLASSIFY.ko.gz          xt_mark.ko.gz         xt_TRACE.ko.gz
nf_nat_tftp.ko.gz                 xt_cluster.ko.gz           xt_multiport.ko.gz    xt_u32.ko.gz
nfnetlink_acct.ko.gz              xt_comment.ko.gz           xt_nat.ko.gz
nfnetlink_cthelper.ko.gz          xt_connbytes.ko.gz         xt_NETMAP.ko.gz

Ideas?

Thanks

Last edited by Tharbad (2016-03-13 22:29:44)

paulkerry

Member

From: Sheffield, UK

Registered: 2014-10-02

Posts: 611

Re: [Solved] iptables kernel module not found

The modules are in a different subdirectory...

/lib/modules/4.4.5-1-ARCH/kernel/net/ipv4/netfilter/iptable_filter.ko.gz
/lib/modules/4.4.5-1-ARCH/kernel/net/ipv6/netfilter/ip6table_filter.ko.gz

I don't use ufw/gufw - can you try and use iptables directly instead?
https://wiki.archlinux.org/index.php/Iptables
https://wiki.archlinux.org/index.php/Si … l_firewall

mich41

Member

Registered: 2012-06-22

Posts: 796

Re: [Solved] iptables kernel module not found

Did you reboot after the update or are you trying to load 4.4.5 modules to some older kernel that's still running?

WorMzy

Forum Moderator

From: Scotland

Registered: 2010-06-16

Posts: 11,901

Website

Re: [Solved] iptables kernel module not found

If you did reboot, please post the output of

uname -a

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

Tharbad

Member

Registered: 2016-02-27

Posts: 270

Re: [Solved] iptables kernel module not found

The modules are in a different subdirectory...

/lib/modules/4.4.5-1-ARCH/kernel/net/ipv4/netfilter/iptable_filter.ko.gz
/lib/modules/4.4.5-1-ARCH/kernel/net/ipv6/netfilter/ip6table_filter.ko.gz

I don't use ufw/gufw - can you try and use iptables directly instead?
https://wiki.archlinux.org/index.php/Iptables
https://wiki.archlinux.org/index.php/Si … l_firewall

Now its working. I've loaded all the iptables_* modules in that path and added a file at /etc/modprobe.d/

Thanks