Posted: Fri Aug 28, 2020 22:51 Post subject: Iptables command ignored without error message
Hello, I am running an iptables command from telnet to my router, each time I run the command it seems to have no effect and I can't see it listed in the list of rules.
On dd-wrt, the fact it reports adding the rule doesn't necessarily mean it did (yeah, weird). For space saving reasons, dd-wrt removes many error messages from the system (these days, w/ the amount of flash typically available, that shouldn't be necessary, but given the continued need to support legacy routers, it just is).
If I run that command on tomato (which I know doesn't support it unless the TTL module is loaded), I get the following:
Code:
root@tomato-lab2:/tmp/home/root# iptables -t mangle -I POSTROUTING -o vlan2 -j TTL --ttl-set 65 -v
TTL all opt -- in * out vlan2 0.0.0.0/0 -> 0.0.0.0/0 TTL set to 65
iptables: No chain/target/match by that name.
Notice I get the same output as you, *plus* an error message. See what I mean?
At least on tomato, I need to explicitly load the TTL module first, then it works.
Wow! Thank you Eibgrad, that did the trick. Really appreciate the fast response!
eibgrad wrote:
On dd-wrt, the fact it reports adding the rule doesn't necessarily mean it did (yeah, weird). For space saving reasons, dd-wrt removes many error messages from the system (these days, w/ the amount of flash typically available, that shouldn't be necessary, but given the continued need to support legacy routers, it just is).
If I run that command on tomato (which I know doesn't support it unless the TTL module is loaded), I get the following:
Code:
root@tomato-lab2:/tmp/home/root# iptables -t mangle -I POSTROUTING -o vlan2 -j TTL --ttl-set 65 -v
TTL all opt -- in * out vlan2 0.0.0.0/0 -> 0.0.0.0/0 TTL set to 65
iptables: No chain/target/match by that name.
Notice I get the same output as you, *plus* an error message. See what I mean?
At least on tomato, I need to explicitly load the TTL module first, then it works.
Code:
insmod xt_HL
I always thought dd-wrt loaded this automatically, or it was in the firmware by default, but maybe there are exceptions. I can't guarantee that xt_HL is the module you need on dd-wrt. I'm only saying it works here for tomato.
