The error message seems to tell you have no chain defined under the name INPUT , would it be possible to get a dump from iptables using "/sbin/iptables-save" Best regards André Paulsberg-Csibi Senior Network Engineer IBM Services AS Sensitivity: Internal -----Opprinnelig melding----- Fra: netfilter-owner@xxxxxxxxxxxxxxx <netfilter-owner@xxxxxxxxxxxxxxx> På vegne av Brent Clark Sendt: mandag 2. juli 2018 11.42 Til: netfilter <netfilter@xxxxxxxxxxxxxxx> Emne: --comment gives me iptables: No chain/target/match by that name. Good day Guys Im sitting with a very weird problem, and Im hoping someone could be of assistance. If I add comments to the end of my rules, I get 'iptables: No chain/target/match by that name.' If I remove the comment(s), all is well. Im running Debian Stretch (I too upgraded to iptables from backports). # /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 13 -j DROP -m comment --comment '900 drop ICMP timestamp requests' iptables: No chain/target/match by that name. # /sbin/iptables -A INPUT -p icmp -m icmp --icmp-type 13 -j DROP # # iptables -n -L -v | grep DROP 0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 13 I have googled and double checked the documentation, and from what I can see, Im not doing anything wrong. If anyone can assist, it would greatly be appreciated. Kind Regards Brent Clark -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvger.kernel.org%2Fmajordomo-info.html&data=02%7C01%7CAndre.Paulsberg-Csibi%40evry.com%7C092775f1472847d3beec08d5e0001673%7C40cc2915e2834a2794716bdd7ca4c6e1%7C1%7C0%7C636661213333921085&sdata=5S5kFDMxYSpNVb8p4hVMHNJLqDDvKLKPd5%2FULLVNFrI%3D&reserved=0 ��.n��������+%������w��{.n����z���)�� jg��� �����ݢj����G���� ���j:+v���w�m������w�������h�����٥
