[CentOS] Questoin on iptables

Mon Jul 14 21:45:27 UTC 2014
Alexander Dalloz <ad+lists at uni-x.org>

Am 14.07.2014 23:13, schrieb Jerry Geis:

> I did not send the exact command I used but it is "yum
> provides /lib64/xtables/libipt_Spamhaus.so"
> No matches found.
>
> I am using this script to block spam:
> #!/bin/bash
> IPTABLES=/sbin/iptables
> FILE="/tmp/drop.txt"
> URL="http://www.spamhaus.org/drop/drop.txt"
>
> $IPTABLES -D INPUT -j Spamhaus
> $IPTABLES -D OUTPUT -j Spamhaus
> $IPTABLES -D FORWARD -j Spamhaus
> $IPTABLES -F Spamhaus
> $IPTABLES -X Spamhaus
>
> cd /tmp
> wget $URL
> $IPTABLES -N Spamhaus
>
> blocks=$(cat $FILE | egrep -v '^;' | awk '{ print $1}')
> for ipblock in $blocks
> do
>          $IPTABLES -A Spamhaus -s $ipblock -j DROP
> done
>
> blocks=$(cat /etc/silentm/firewall_custom.conf | egrep -v '^;' | awk '{
> print $1}')
> for ipblock in $blocks
> do
>          $IPTABLES -A Spamhaus -s $ipblock -j DROP
> done
>
> $IPTABLES -I INPUT -j Spamhaus
> $IPTABLES -I OUTPUT -j Spamhaus
> $IPTABLES -I FORWARD -j Spamhaus
>
> This script then outputs that error about the missing .so
>
> jerry

It means that your script is not correct[1] and by error tries to load a 
helper module which does not exist. So fix your script.

[1] "cat | grep | awk" constructs are far from being elegant.

Alexander