Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ubuntu24.04で Error: Chain of type "nat" is not supported, perhaps kernel support is missing? になってNATが設定できない #25

Open
nexryai opened this issue May 25, 2024 · 5 comments

Comments

@nexryai
Copy link
Owner

nexryai commented May 25, 2024

nexryai@raiden:~$ sudo llfctl offline
✘ ERROR: Fatal error: exit status 1
  ↳ Failed to exec. | "nft -f /etc/nftables.lance.conf" >>> /etc/nftables.lance.conf:30:3-39: Error: Chain of type "nat" is not supported, perhaps kernel support is missing?
                type nat hook prerouting priority 100; policy accept;
                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
@nexryai
Copy link
Owner Author

nexryai commented May 25, 2024

Ubuntu22.04とDebianでは普通に設定できる

@nexryai
Copy link
Owner Author

nexryai commented May 25, 2024

そもそもpreroutingに設定されてるtype自体がおかしい気がするけど逆に何で今まで動いてたのか謎
正しい書き方でした

@nexryai nexryai pinned this issue May 25, 2024
@nexryai
Copy link
Owner Author

nexryai commented May 25, 2024

  • Ubuntu22.04.4はnftables v1.0.2 (Lester Gooch)
  • Debian12はnftables v1.0.6 (Lester Gooch #5)
  • Ubuntu24.04はnftables v1.0.9 (Old Doc Yak #3)

@nexryai
Copy link
Owner Author

nexryai commented May 25, 2024

filterにしてもError: Chain of type "filter" is not supportedでコケる

@nexryai
Copy link
Owner Author

nexryai commented May 25, 2024

これ、最悪のパターンは既存の22.04の環境をアップデートしたら知らないうちにルールが適用できなくなってて起動時に有効化するコマンドが効かなくなって無防備な状態で放置されるってパターンなので割と緊急かもしれない

@nexryai nexryai unpinned this issue Jun 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant