• 9dra
  • New member
  • Offline
  • From: Indonesia
  • Registered: 2008-07-04
  • Posts: 9

Topic: iptables-1.4.2

When i upgrade my iptables, there is warning -The "nat" table is not intended for filtering, hence the use of DROP is deprecated and will permanently be disabled in the next iptables release. Please adjust your scripts.-

I configured my iptables scripts like in http://www.chillispot.info/chilliforum/ … php?id=189

How to fix this error with new iptables scripts ??? but can keep block port 3128 (proxy) in NAT table ??? Thx.

  • Registered: 2009-07-04
  • Posts: 1

Re: iptables-1.4.2

Server: iptables 1.4.3

#nano chilli.iptables

---------------------------------------------------------------------------------------------------------------------
#Allow Transparent Proxy
iptables -t nat -A PREROUTING -i tun0 -p tcp -m tcp --dport 3128 --syn -j DROP
iptables -t nat -A PREROUTING -i tun0 -p tcp -m tcp -d 192.168.2.0/24 --dport 80 -j RETURN
iptables -t nat -A PREROUTING -i tun0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
----------------------------------------------------------------------------------------------------------------------

error  show

iptables v1.4.3.2:
The "nat" table is not intended for filtering, the use of DROP is therefore inhibited.
Try `iptables -h' or 'iptables --help' for more information.