This does not make any better, but at least refer to dmesg which is the common source of information to diagnose kernel-side problems. This is helpful for newbie users. # iptables -I INPUT -j CLUSTERIP iptables: Invalid argument. Run `dmesg' for more information. Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> --- ip6tables-standalone.c | 3 ++- iptables-standalone.c | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/ip6tables-standalone.c b/ip6tables-standalone.c index 5bdcd4f..6c20bd8 100644 --- a/ip6tables-standalone.c +++ b/ip6tables-standalone.c @@ -70,7 +70,8 @@ main(int argc, char *argv[]) ret = ip6tc_commit(&handle); if (!ret) - fprintf(stderr, "ip6tables: %s\n", + fprintf(stderr, "ip6tables: %s. " + "Run `dmesg' for more information.\n", ip6tc_strerror(errno)); exit(!ret); diff --git a/iptables-standalone.c b/iptables-standalone.c index 55d9bbe..630c586 100644 --- a/iptables-standalone.c +++ b/iptables-standalone.c @@ -71,7 +71,8 @@ main(int argc, char *argv[]) ret = iptc_commit(&handle); if (!ret) { - fprintf(stderr, "iptables: %s\n", + fprintf(stderr, "iptables: %s. " + "Run `dmesg' for more information.\n", iptc_strerror(errno)); if (errno == EAGAIN) { exit(RESOURCE_PROBLEM); -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html