Project

General

Profile

Actions
Copy link

Support #306

closed

iptables: Unknown error 4294967295

Added by Lambert Osas over 13 years ago. Updated over 13 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Affected Versions:
Label:

Description

Hi all,

I'm new to Suricata and I was able to setup Suricata 1.1beta2 on a centos dedicated server. The installation was smooth and I could start the engine with this command: suricata -D -c /etc/suricata/suricata.yaml -q 0

However, when I attempted to configure IPtables with the command: iptables -I FORWARD -j NFQUEUE

I got the folowing error: iptables: Unknown error 4294967295

Please can someone yell me what might be wrong

Thanks in advance!

Actions
Copy link
 #1

Updated by Lambert Osas over 13 years ago

Additional info:

Below is the output of : suricata --build-info

[root@42826 ~]# suricata --build-info
[19440] 31/7/2011 -- 12:54:25 - (suricata.c:553) <Info> (main) -- This is Suricata version 1.1beta2
[19440] 31/7/2011 -- 12:54:25 - (suricata.c:436) <Info> (SCPrintBuildInfo) -- Features: NFQ LIBPCAP_VERSION_MAJOR=0 LIBCAP_NG LIBNET1.1
[19440] 31/7/2011 -- 12:54:25 - (suricata.c:450) <Info> (SCPrintBuildInfo) -- 32-bits, Little-endian architecture
[19440] 31/7/2011 -- 12:54:25 - (suricata.c:452) <Info> (SCPrintBuildInfo) -- GCC version 4.1.2 20080704 (Red Hat 4.1.2-50), C version 1999
01

Actions
Copy link
 #2

Updated by Mike Pomraning over 13 years ago

Lambert, I think this is two problems in one.

The first is that iptables doesn't understand the command you're giving it. (Do you have the right kernel modules loaded and supporting libraries available? Etc.)

The second is, I think, that some (old?) versions of iptables incorrectly complained about -1 when they meant to complain about errno. 4294967295 is what you get when you cast -1 to an unsigned 32-bit int. :)

-Mike

Actions
Copy link
 #3

Updated by Eric Leblond over 13 years ago

This explicit message error of iptables is often linked with the lack of support of the NFQUEUE. Or your kernel is too old and does not have the feature, or the nfnetlink_queue module is not loaded.

Actions
Copy link
 #4

Updated by Victor Julien over 13 years ago

  • Status changed from New to Rejected

Anyhow, not a Suricata issue. Either the reporters distro or the netfilter project is the place for getting support.

Actions
Copy link

Also available in: Atom PDF