iptables problem

[AdorCn]

Whenever I tried to use ettercap with iptable redir; I got a message called can't initialize ip table 'nat' because permission denied or kernel need to be upgrade.

Note I loged on as root.

[AdorCn]

Error message from ettercap:

SEND L3 ERROR: 60 byte packet (0800:01) destined to 192.168.1.5 was not forwarded (libnet_write_raw_ipv4(): -1 bytes written (Operation not permitted)
)
SEND L3 ERROR: 29 byte packet (0800:01) destined to 192.168.1.5 was not forwarded (libnet_write_raw_ipv4(): -1 bytes written (Operation not permitted)
)

From terminal/shell prompt:

ettercap NG-0.7.3 copyright 2001-2004 ALoR & NaGA

iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.5: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.

Note: I run it as root. From root account (and also use sudo command).


What is the solution please?

[shamanvirtuel]

maybe there's missing some chmod+x somewhere...i mean executable permission for some iptable stuff....but really not sure.....

[Baxter]

nano /usr/local/etc/etter.conf

change from
#redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
#redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

to
redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

notice the uncomment ( # )

save
this should help

[AdorCn]

nano /usr/local/etc/etter.conf

change from
#redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
#redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

to
redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

notice the uncomment ( # )

save
this should help

The problem arise after uncomment those lines.

maybe there's missing some chmod+x somewhere...i mean executable permission for some iptable stuff....but really not sure.....

I don't think so, because I made executable everything inside 'ipv4' directory. But may be you are right, then the question is what should be executable?

[Baxter]

make sure those two lines only use one line each. when you open the konsole, view it on full screen then go into etter.conf
i had this problem and thats how i solved it.