Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Trying to block a certain http/https URL request from hitting the server by adding this rule to iptables:

iptables -I INPUT 1 -p tcp -m multiport --destination-ports 80,443 -m string --string "my_string" --algo bm -j DROP

This returns the following error: No chain/target/match by that name

I can add other rules to the INPUT chain no problem. I believe I've identified the culprit as the string module, but to me the syntax looks fine.

share|improve this question
are you using an standdard ubuntu kernel? Because the syntax is fine. – diegows Apr 21 '12 at 20:34
Ubuntu 10.04 server kernel 2.6.32-5-openvz-amd64 – user101570 Apr 21 '12 at 20:38
A module is missing, looks at directory modules if you have the modules that you are using in your command line. Your command ran perfect in you of my Ubuntu 10.04 servers. – diegows Apr 21 '12 at 20:58

There are some specific considerations to be taken if you want to properly setup iptables on an openvz vps, take a look at the official openvz wiki :

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.