Hi! I compiled kernel 2.6.13.2 and iptables 1.3.3 with some extra modules from patch-o-matic-ng. Compiling went good. But when doing a # iptables -L I get the following error message: iptables v1.3.3: can't initialize iptables table `filter': Bad file descriptor Perhaps iptables or your kernel needs to be upgraded. Here's my module list: iptable_filter 7168 0 ip_tables 25856 1 iptable_filter edd 14816 0 ipv6 278528 21 joydev 13760 0 sg 42656 0 st 44064 0 sr_mod 21412 0 ide_cd 45572 0 cdrom 42912 2 sr_mod,ide_cd binfmt_misc 16392 1 ohci_hcd 25988 0 e1000 113844 0 sworks_agp 13344 0 agpgart 38988 1 sworks_agp i2c_piix4 12816 0 i2c_core 25728 1 i2c_piix4 evdev 13312 0 dm_mod 63388 0 usbcore 125308 2 ohci_hcd gdth 86308 3 sd_mod 23552 3 scsi_mod 141288 5 sg,st,sr_mod,gdth,sd_mod output from strace: execve("/usr/sbin/iptables", ["iptables", "-L"], [/* 70 vars */]) = 0 uname({sysname="Linux", nodename="srv11", release="2.6.13.2-P3smp", version="#1 SMP Fri Sep 30 13:37:02 CEST 2005", machine="i686"}) = 0 brk(0) = 0x8054000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_dev=makedev(3, 1), st_ino=708235, st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=256, st_size=126736, st_atime=2005/09/30-16:47:26, st_mtime=2005/09/30-16:12:52, st_ctime=2005/09/30-16:12:52}) = 0 old_mmap(NULL, 126736, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40018000 close(3) = 0 open("/lib/libdl.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\v\0\000"..., 512) = 512 fstat64(3, {st_dev=makedev(3, 1), st_ino=58002, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=32, st_size=13072, st_atime=2005/09/30-16:47:26, st_mtime=2004/10/05-14:06:48, st_ctime=2005/01/28-12:03:16}) = 0 old_mmap(NULL, 12388, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40037000 madvise(0x40037000, 12388, MADV_SEQUENTIAL|0x1) = 0 old_mmap(0x40039000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x40039000 close(3) = 0 open("/lib/libnsl.so.1", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300:\0"..., 512) = 512 fstat64(3, {st_dev=makedev(3, 1), st_ino=58005, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=192, st_size=91523, st_atime=2005/09/30-16:47:26, st_mtime=2004/10/05-14:08:06, st_ctime=2005/01/28-12:03:17}) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4003b000 old_mmap(NULL, 88288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4003c000 madvise(0x4003c000, 88288, MADV_SEQUENTIAL|0x1) = 0 old_mmap(0x4004e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x11000) = 0x4004e000 old_mmap(0x40050000, 6368, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40050000 close(3) = 0 open("/lib/tls/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0L\1\000"..., 512) = 512 fstat64(3, {st_dev=makedev(3, 1), st_ino=58019, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=2664, st_size=1359489, st_atime=2005/09/30-16:47:26, st_mtime=2004/10/05-14:21:02, st_ctime=2005/01/28-12:03:17}) = 0 old_mmap(NULL, 1137708, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40052000 madvise(0x40052000, 1137708, MADV_SEQUENTIAL|0x1) = 0 mprotect(0x40161000, 27692, PROT_NONE) = 0 old_mmap(0x40162000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10f000) = 0x40162000 old_mmap(0x40166000, 7212, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40166000 close(3) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40168000 mprotect(0x40162000, 4096, PROT_READ) = 0 set_thread_area({entry_number:-1 -> 6, base_addr:0x40168080, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 munmap(0x40018000, 126736) = 0 socket(PF_INET, SOCK_RAW, IPPROTO_RAW) = 3 getsockopt(3, SOL_IP, 0x40 /* IP_??? */, "filter\0@\364?\26@\314 \0\0\0045\5\10\344\267\224\277\021"..., [84]) = 0 brk(0) = 0x8054000 brk(0x8075000) = 0x8075000 getsockopt(3, SOL_IP, 0x41 /* IP_??? */, 0x8054078, 0xbf94b798) = -1 EINVAL (Invalid argument) close(3) = 0 open("/proc/sys/kernel/modprobe", O_RDONLY) = 3 read(3, "/sbin/modprobe\n", 1024) = 15 close(3) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x401680c8) = 11622 wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 11622 --- SIGCHLD (Child exited) @ 0 (0) --- getsockopt(-1, SOL_IP, 0x40 /* IP_??? */, 0xbf94b7a0, 0xbf94b79c) = -1 EBADF (Bad file descriptor) write(2, "iptables v1.3.3: ", 17iptables v1.3.3: ) = 17 write(2, "can\'t initialize iptables table "..., 61can't initialize iptables table `filter': Bad file descriptor) = 61 write(2, "\n", 1 ) = 1 write(2, "Perhaps iptables or your kernel "..., 54Perhaps iptables or your kernel needs to be upgraded. ) = 54 exit_group(3) = ? Binaries reside under /usr/sbin, libs under /usr/lib/netfilter. What am I missing ? Best regards Stefan Weigel IT Mondial Assistance Deutschland GmbH Riedenburger Strasse 2 D-81677 München Telefon +49 (89) 20 80 1 - 1085 Telefax +49 (89) 20 80 1 - 1907 mailto: stefan.weigel@xxxxxxxxxx http://www.mondial.de