iptables: No chain/target/match by that name

[Administrator]

Hi Members,

When trying to add any rule in iptables on your VPS with OpenVZ virtualization, you might receive an error below.

iptables: No chain/target/match by that name

You will have to enable few modules on the node and then for the VPS. On the node, execute commands below.

[root@server ~]#modprobe xt_tcpudp
[root@server ~]#modprobe ip_conntrack
[root@server ~]#modprobe xt_state

If you want to use stateful firewall rules (and you should!) you will also need to make sure that 'ipt_state' is in the 'IPTABLES' option in your vz.conf file

IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_state"

Restart your container & then try adding the iptables rule. It would work as expected.