Iptables GEOIP not working under Debian Squeeze
up vote
4
down vote
favorite
I've just installed xtables-*, compiled the geoip database, but when I try to use an iptables command it always gives back the following error:
Command
iptables -I INPUT -p tcp --dport 80 -m geoip --src-cc 'DE' -j DROP
Error
Could not open /usr/share/xt_geoip/LE/DE.iv0: No such file or directory
iptables v1.4.8: Could not read geoip database`
The problem is, that the support scripts create the geoip database, but they all end as iv4 and iv6, not iv0. When I rename the DE.iv4 file to DE.iv0, the error becomes:
iptables: No chain/target/match by that name.
How can I breathe life into the system?
debian iptables
edited Sep 19 '15 at 7:03
perror
1,90441835
asked Dec 21 '11 at 16:10
Jauzsika
19518
bumped to the homepage by Community♦ yesterday
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
up vote
4
down vote
favorite
I've just installed xtables-*, compiled the geoip database, but when I try to use an iptables command it always gives back the following error:
Command
iptables -I INPUT -p tcp --dport 80 -m geoip --src-cc 'DE' -j DROP
Error
Could not open /usr/share/xt_geoip/LE/DE.iv0: No such file or directory
iptables v1.4.8: Could not read geoip database`
The problem is, that the support scripts create the geoip database, but they all end as iv4 and iv6, not iv0. When I rename the DE.iv4 file to DE.iv0, the error becomes:
iptables: No chain/target/match by that name.
How can I breathe life into the system?
debian iptables
edited Sep 19 '15 at 7:03
perror
1,90441835
asked Dec 21 '11 at 16:10
Jauzsika
19518
bumped to the homepage by Community♦ yesterday
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
I have followed step by step in this tutorial, everything is describe, how to install and use iptables with geoip to block countries. terminal28.com/how-to-block-countries-using-iptables-debian
– user48564
Oct 4 '13 at 21:45
add a comment |
up vote
4
down vote
favorite
up vote
4
down vote
favorite
I've just installed xtables-*, compiled the geoip database, but when I try to use an iptables command it always gives back the following error:
Command
iptables -I INPUT -p tcp --dport 80 -m geoip --src-cc 'DE' -j DROP
Error
Could not open /usr/share/xt_geoip/LE/DE.iv0: No such file or directory
iptables v1.4.8: Could not read geoip database`
The problem is, that the support scripts create the geoip database, but they all end as iv4 and iv6, not iv0. When I rename the DE.iv4 file to DE.iv0, the error becomes:
iptables: No chain/target/match by that name.
How can I breathe life into the system?
debian iptables
edited Sep 19 '15 at 7:03
perror
1,90441835
asked Dec 21 '11 at 16:10
Jauzsika
19518
I've just installed xtables-*, compiled the geoip database, but when I try to use an iptables command it always gives back the following error:
Command
iptables -I INPUT -p tcp --dport 80 -m geoip --src-cc 'DE' -j DROP
Error
Could not open /usr/share/xt_geoip/LE/DE.iv0: No such file or directory
iptables v1.4.8: Could not read geoip database`
The problem is, that the support scripts create the geoip database, but they all end as iv4 and iv6, not iv0. When I rename the DE.iv4 file to DE.iv0, the error becomes:
iptables: No chain/target/match by that name.
How can I breathe life into the system?
debian iptables
debian iptables
edited Sep 19 '15 at 7:03
perror
1,90441835
asked Dec 21 '11 at 16:10
Jauzsika
19518
edited Sep 19 '15 at 7:03
perror
1,90441835
asked Dec 21 '11 at 16:10
Jauzsika
19518
edited Sep 19 '15 at 7:03
perror
1,90441835
edited Sep 19 '15 at 7:03
perror
1,90441835
edited Sep 19 '15 at 7:03
perror
1,90441835
1,90441835
asked Dec 21 '11 at 16:10
Jauzsika
19518
asked Dec 21 '11 at 16:10
Jauzsika
19518
asked Dec 21 '11 at 16:10
Jauzsika
19518
19518
bumped to the homepage by Community♦ yesterday
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ yesterday
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
I have followed step by step in this tutorial, everything is describe, how to install and use iptables with geoip to block countries. terminal28.com/how-to-block-countries-using-iptables-debian
– user48564
Oct 4 '13 at 21:45
add a comment |
I have followed step by step in this tutorial, everything is describe, how to install and use iptables with geoip to block countries. terminal28.com/how-to-block-countries-using-iptables-debian
– user48564
Oct 4 '13 at 21:45
I have followed step by step in this tutorial, everything is describe, how to install and use iptables with geoip to block countries. terminal28.com/how-to-block-countries-using-iptables-debian
– user48564
Oct 4 '13 at 21:45
I have followed step by step in this tutorial, everything is describe, how to install and use iptables with geoip to block countries. terminal28.com/how-to-block-countries-using-iptables-debian
– user48564
Oct 4 '13 at 21:45
add a comment |
2 Answers
2
active
oldest
votes
up vote
1
down vote
The version of xtables in Debian Squeeze was pretty old, and it pre-dated the splitting of IPv4 and IPv6 into separate maps. This split happened 2010-12-18. See here.
Your support scripts are creating new-style *.iv4 and *.iv6 files, while the iptables extension module expects old-style *.iv0 files.
If you're still using Squeeze, you'll need to find and download an old version of the support scripts used to create the IP maps. A suitable version might actually be included in the xtables source code package version that matches the binary package you may be currently using.
answered Dec 16 '17 at 13:03
telcoM
15.6k12143
add a comment |
up vote
-3
down vote
Do no use 'DE' .. just write DE,CA,UK, like this, without quotes
answered Mar 5 '12 at 3:57
anon
1
You might want to provide an exact working command line.
– Karlson
Mar 5 '12 at 16:29
3
I don't think quotes make differences ,'DE'is same asDEhere under bourne shell
– daisy
Jun 3 '12 at 7:14
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f27326%2fiptables-geoip-not-working-under-debian-squeeze%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
1
down vote
The version of xtables in Debian Squeeze was pretty old, and it pre-dated the splitting of IPv4 and IPv6 into separate maps. This split happened 2010-12-18. See here.
Your support scripts are creating new-style *.iv4 and *.iv6 files, while the iptables extension module expects old-style *.iv0 files.
If you're still using Squeeze, you'll need to find and download an old version of the support scripts used to create the IP maps. A suitable version might actually be included in the xtables source code package version that matches the binary package you may be currently using.
answered Dec 16 '17 at 13:03
telcoM
15.6k12143
add a comment |
up vote
1
down vote
The version of xtables in Debian Squeeze was pretty old, and it pre-dated the splitting of IPv4 and IPv6 into separate maps. This split happened 2010-12-18. See here.
Your support scripts are creating new-style *.iv4 and *.iv6 files, while the iptables extension module expects old-style *.iv0 files.
If you're still using Squeeze, you'll need to find and download an old version of the support scripts used to create the IP maps. A suitable version might actually be included in the xtables source code package version that matches the binary package you may be currently using.
answered Dec 16 '17 at 13:03
telcoM
15.6k12143
add a comment |
up vote
1
down vote
up vote
1
down vote
The version of xtables in Debian Squeeze was pretty old, and it pre-dated the splitting of IPv4 and IPv6 into separate maps. This split happened 2010-12-18. See here.
Your support scripts are creating new-style *.iv4 and *.iv6 files, while the iptables extension module expects old-style *.iv0 files.
If you're still using Squeeze, you'll need to find and download an old version of the support scripts used to create the IP maps. A suitable version might actually be included in the xtables source code package version that matches the binary package you may be currently using.
answered Dec 16 '17 at 13:03
telcoM
15.6k12143
The version of xtables in Debian Squeeze was pretty old, and it pre-dated the splitting of IPv4 and IPv6 into separate maps. This split happened 2010-12-18. See here.
Your support scripts are creating new-style *.iv4 and *.iv6 files, while the iptables extension module expects old-style *.iv0 files.
If you're still using Squeeze, you'll need to find and download an old version of the support scripts used to create the IP maps. A suitable version might actually be included in the xtables source code package version that matches the binary package you may be currently using.
answered Dec 16 '17 at 13:03
telcoM
15.6k12143
answered Dec 16 '17 at 13:03
telcoM
15.6k12143
answered Dec 16 '17 at 13:03
telcoM
15.6k12143
answered Dec 16 '17 at 13:03
telcoM
15.6k12143
15.6k12143
add a comment |
add a comment |
up vote
-3
down vote
Do no use 'DE' .. just write DE,CA,UK, like this, without quotes
answered Mar 5 '12 at 3:57
anon
1
You might want to provide an exact working command line.
– Karlson
Mar 5 '12 at 16:29
3
I don't think quotes make differences ,'DE'is same asDEhere under bourne shell
– daisy
Jun 3 '12 at 7:14
add a comment |
up vote
-3
down vote
Do no use 'DE' .. just write DE,CA,UK, like this, without quotes
answered Mar 5 '12 at 3:57
anon
1
You might want to provide an exact working command line.
– Karlson
Mar 5 '12 at 16:29
3
I don't think quotes make differences ,'DE'is same asDEhere under bourne shell
– daisy
Jun 3 '12 at 7:14
add a comment |
up vote
-3
down vote
up vote
-3
down vote
Do no use 'DE' .. just write DE,CA,UK, like this, without quotes
answered Mar 5 '12 at 3:57
anon
1
Do no use 'DE' .. just write DE,CA,UK, like this, without quotes
answered Mar 5 '12 at 3:57
anon
1
answered Mar 5 '12 at 3:57
anon
1
answered Mar 5 '12 at 3:57
anon
1
answered Mar 5 '12 at 3:57
anon
1
1
You might want to provide an exact working command line.
– Karlson
Mar 5 '12 at 16:29
3
I don't think quotes make differences ,'DE'is same asDEhere under bourne shell
– daisy
Jun 3 '12 at 7:14
add a comment |
You might want to provide an exact working command line.
– Karlson
Mar 5 '12 at 16:29
3
I don't think quotes make differences ,'DE'is same asDEhere under bourne shell
– daisy
Jun 3 '12 at 7:14
You might want to provide an exact working command line.
– Karlson
Mar 5 '12 at 16:29
You might want to provide an exact working command line.
– Karlson
Mar 5 '12 at 16:29
3
3
I don't think quotes make differences ,
'DE' is same as DE here under bourne shell– daisy
Jun 3 '12 at 7:14
I don't think quotes make differences ,
'DE' is same as DE here under bourne shell– daisy
Jun 3 '12 at 7:14
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f27326%2fiptables-geoip-not-working-under-debian-squeeze%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I have followed step by step in this tutorial, everything is describe, how to install and use iptables with geoip to block countries. terminal28.com/how-to-block-countries-using-iptables-debian
– user48564
Oct 4 '13 at 21:45