Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Trying to block a certain http/https URL request from hitting the server by adding this rule to iptables:

iptables -I INPUT 1 -p tcp -m multiport --destination-ports 80,443 -m string --string "my_string" --algo bm -j DROP

This returns the following error: No chain/target/match by that name

I can add other rules to the INPUT chain no problem. I believe I've identified the culprit as the string module, but to me the syntax looks fine.

share|improve this question
    
are you using an standdard ubuntu kernel? Because the syntax is fine. –  diegows Apr 21 '12 at 20:34
    
Ubuntu 10.04 server kernel 2.6.32-5-openvz-amd64 –  user101570 Apr 21 '12 at 20:38
    
A module is missing, looks at directory modules if you have the modules that you are using in your command line. Your command ran perfect in you of my Ubuntu 10.04 servers. –  diegows Apr 21 '12 at 20:58
add comment

1 Answer 1

There are some specific considerations to be taken if you want to properly setup iptables on an openvz vps, take a look at the official openvz wiki : http://wiki.openvz.org/Setting_up_an_iptables_firewall

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.