Re: iptables-1.8.12 systemctl errors- BLFS 13.0

This is a multi-part message in MIME format...

------------=_1776161963-1253-23696
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, 2026-04-13 at 16:17 -0500, rhubarbpieguy wrote:
>=20
> On 4/12/26 8:51 PM, Bruce Dubbs ([email protected]=C2=A0via blfs-
> support=20
> Mailing List) wrote:
> > On 4/12/26 4:16 PM, rhubarbpieguy ([email protected]=C2=A0via=20
> > blfs-support Mailing List) wrote:
> > >=20
> > > I see the following systemctl iptables errors:
> > >=20
> > > =C3=97 iptables.service - Load Iptables Rules
> > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Loaded: loaded (/usr/lib/systemd/syste=
m/iptables.service;=20
> > > enabled; preset: enabled)
> > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Active: failed (Result: exit-code) sin=
ce Fri 2026-04-10=20
> > > 12:20:25 CDT; 11min ago
> > > =C2=A0=C2=A0Invocation: ba482abfd6a947f793bc2c161eca712a
> > > =C2=A0=C2=A0=C2=A0=C2=A0 Process: 351 ExecStart=3D/etc/systemd/script=
s/iptables=20
> > > (code=3Dexited, status=3D3)
> > > =C2=A0=C2=A0=C2=A0 Mem peak: 5.3M
> > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 CPU: 35ms
> > >=20
> > > Apr 10 12:20:25 lfs iptables[373]: Perhaps iptables or your
> > > kernel=20
> > > needs to be upgraded.
> > > Apr 10 12:20:25 lfs iptables[380]: modprobe: ERROR: could not
> > > insert=20
> > > 'ip_tables': Exec format error
> > > Apr 10 12:20:25 lfs iptables[375]: iptables v1.8.12 (legacy):
> > > can't=20
> > > initialize iptables table `filter': Table does not exist (do you
> > > need=20
> > > to insmod?)
> > > Apr 10 12:20:25 lfs iptables[375]: Perhaps iptables or your
> > > kernel=20
> > > needs to be upgraded.
> > > Apr 10 12:20:25 lfs iptables[383]: modprobe: ERROR: could not
> > > insert=20
> > > 'ip_tables': Exec format error
> > > Apr 10 12:20:25 lfs iptables[381]: iptables v1.8.12 (legacy):
> > > can't=20
> > > initialize iptables table `filter': Table does not exist (do you
> > > need=20
> > > to insmod?)
> > > Apr 10 12:20:25 lfs iptables[381]: Perhaps iptables or your
> > > kernel=20
> > > needs to be upgraded.
> > > Apr 10 12:20:25 lfs systemd[1]: iptables.service: Control process
> > > exited, code=3Dexited, status=3D3/NOTIMPLEMENTED
> > > Apr 10 12:20:25 lfs systemd[1]: iptables.service: Failed with
> > > result=20
> > > 'exit-code'.
> > > Apr 10 12:20:25 lfs systemd[1]: Failed to start Load Iptables
> > > Rules.
> > >=20
> > > I compiled iptables-1.8.12 and built all kernel options
> > > (including=20
> > > legacy) shown in the documentation.=C2=A0 I'm using the Personal
> > > Firewall=20
> > > and see the /etc/systemd/scripts/ iptables script.
> >=20
> > Did you build the kernel options as modules or did you build them
> > into=20
> > the kernel?
> > You have two modprobe errors.=C2=A0 If you built modules, did you do the
> > kernel 'modules_install' command?=C2=A0 If you built the modules into
> > the=20
> > kernel then you need to remove/comment out the modprobe commands in
> > the /etc/systemd/scripts/iptables file.
> >=20
> > =C2=A0 -- Bruce
> >=20
> >=20
> >=20
> I ran make modules_install and /lib/modules ... is populated.=C2=A0 I have
> the following lines in /etc/systemd/scripts/iptables:
>=20
> #modprobe nf_conntrack
> modprobe xt_LOG
>=20
> My .config shows:
>=20
> CONFIG_NET=3Dy
> CONFIG_NETFILTER=3Dy
> CONFIG_NETFILTER_ADVANCED=3Dy
> CONFIG_NF_CONNTRACK=3Dy
> CONFIG_NETFILTER_XTABLES=3Dy
> CONFIG_NETFILTER_XTABLES_LEGACY=3Dy
> CONFIG_NETFILTER_XT_TARGET_LOG=3Dm
> CONFIG_IP_NF_IPTABLES=3Dy
> CONFIG_IP_NF_NAT=3Dm
>=20
> And in addition to the errors shown with 'systemctl status=20
> iptables.service -l' I see unknown symbol errors with journalctl:
>=20
> Apr 13 15:47:08 lfs iptables[357]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[359]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[361]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[363]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[365]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[367]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[369]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[371]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[373]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[379]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
> Apr 13 15:47:08 lfs iptables[382]: modprobe: ERROR: could not insert=20
> 'ip_tables': Unknown symbol in module, or unknown parameter (see
> dmesg)
>=20
> I should mention I believe iptables is working as I test with a 3rd=20
> party site and the test passes.

This looks to me a a mismatch between modules and kernel image. I would
try reinstalling the kernel making sure both kernel image and modules
are replaced in one go.
--=20
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Maurice van der Stee

------------=_1776161963-1253-23696
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-support
Unsubscribe: See the above information page

------------=_1776161963-1253-23696--