Re: 3.0 RC iptables-restore v1.4.14: unknown option "--update-counters"
David Touzeau <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <[email protected]> |
Thanks But the main issue is our using the latest Debian version 7.8 latest version is 6.12.1-1 This new version is on the "testing" repository. Le 10/04/2015 02:18, Tsaousis, Costa a écrit : > David, > > I just recalled we also have support for the old ipset version. > > Edit /etc/firehol/firehol-defaults.conf and set this: > > IPSET_SRC_DST_OPTIONS= > > (just empty - nothing after the equal sign) > > You can also put this at the top of your firehol.conf. > > Of course the best way is to update ipset and iptables (I think you > will also need to update your kernel). > > Costa > > > > On Thu, Apr 9, 2015 at 4:40 PM, Tsaousis, Costa <[email protected]> wrote: >> Hi David, >> >> you have an old version of iptables (and probably old ipset too). >> >> You should update your system to use these features (you will need >> ipset above v6.19 and the matching iptables version). >> >> Costa >> >> >> On Thu, Apr 9, 2015 at 3:13 PM, David Touzeau <[email protected]> wrote: >>> Dear >>> >>> Using this configuration: >>> >>> ipv4 ipset create proxy_white_ssl hash:ip >>> ipv4 ipset addfile proxy_white_ssl ips proxy_ssl_whitelist >>> ipv4 ipset create MyIPs hash:ip >>> ipv4 ipset addfile MyIPs ips MyIPs >>> >>> # * * * * Transparent Proxy * * * * >>> transparent_squid 16639 squid dst not ipset:proxy_white_ssl >>> transparent_proxy 443 24472 squid dst not ipset:proxy_white_ssl >>> >>> >>> I receive this error >>> >>> >>> iptables-restore v1.4.14: unknown option "--update-counters" >>> Error occurred at line: 147 >>> Try `iptables-restore -h' or 'iptables-restore --help' for more information. >>> >>> Offending line: >>> -A PREROUTING -p tcp --sport 1024:65535 -m set ! --match-set proxy_white_ssl >>> dst ! --update-counters ! --update-subcounters --dport 80 -j REDIRECT >>> --to-ports 16639 >>> >>> FAILED >>> >>> >>> How can fix it ? >>> _______________________________________________ >>> Firehol-support mailing list >>> [email protected] >>> http://lists.firehol.org/mailman/listinfo/firehol-support _______________________________________________ Firehol-support mailing list [email protected] http://lists.firehol.org/mailman/listinfo/firehol-support