iptables-restore: una ble to initializetable ‘security’ Error occurred at line:

oogoogle

重启 iptables 出现这个问题

1. /etc/init.d/iptables restart
   
2. Applying iptables firewall rules: iptables-restore v1.3.5: iptables-restore: una ble to initializetable ‘security’  Error occurred at line: 2 Try `iptables-restore -h’ or ‘iptables-restore –help’ for more information. [FAILED]

复制代码

iptables内容：

1. # Generated by iptables-save v1.3.5 on Wed Jan 16 02:43:43 2013
   
2. *nat
   
3. :PREROUTING ACCEPT [1402:289184]
   
4. :POSTROUTING ACCEPT [90:5400]
   
5. :OUTPUT ACCEPT [90:5400]
   
6. COMMIT
   
7. # Completed on Wed Jan 16 02:43:43 2013
   
8. # Generated by iptables-save v1.3.5 on Wed Jan 16 02:43:43 2013
   
9. *filter
   
10. :INPUT ACCEPT [2865:438216]
    
11. :FORWARD ACCEPT [0:0]
    
12. :OUTPUT ACCEPT [2295:495459]
    
13. # 允许本地连接
    
14. -A INPUT -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT
    
15. # 允许所有已经建立的和相关的连接
    
16. -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
    
17. -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    
18. # 允许loopback!(不然会导致DNS无法正常关闭、memcached 连接失败等问题)
    
19. -A INPUT -i lo -p all -j ACCEPT
    
20. -A OUTPUT -o lo -p all -j ACCEPT
    
21. -A INPUT -i eth0 -j ACCEPT
    
22. # 允许所有本机向外的访问
    
23. -A OUTPUT -j ACCEPT
    
24. # 允许访问22端口
    
25. -A INPUT -p tcp --syn --dport 22 -j ACCEPT
    
26. -A OUTPUT -p tcp --syn --dport 22 -j ACCEPT
    
27. # 允许访问80端口
    
28. -A INPUT -p tcp --syn --dport 80 -j ACCEPT
    
29. -A OUTPUT -p tcp --syn --dport 80 -j ACCEPT
    
30. # 允许访问443端口
    
31. -A INPUT -p tcp --dport 443 -j ACCEPT
    
32. -A OUTPUT -p tcp --dport 443 -j ACCEPT
    
33. # 允许Ping
    
34. -A INPUT -p icmp -j ACCEPT
    
35. -A OUTPUT -p icmp -j ACCEPT
    
36. # 允许邮件服务的25端口
    
37. -A INPUT -p tcp --syn --dport 25 -j ACCEPT
    
38. -A OUTPUT -p tcp --syn --dport 25 -j ACCEPT
    
39. # 允许FTP服务的21和20端口
    
40. -A INPUT -p tcp --syn --dport 21 -j ACCEPT
    
41. -A OUTPUT -p tcp --syn --dport 21 -j ACCEPT
    
42. -A INPUT -p tcp --syn --dport 20 -j ACCEPT
    
43. -A OUTPUT -p tcp --syn --dport 20 -j ACCEPT
    
44. # 允许DNS服务的53端口
    
45. -A INPUT -p tcp --dport 53 -j ACCEPT
    
46. -A OUTPUT -p tcp --dport 53 -j ACCEPT
    
47. # 丢弃坏的TCP包
    
48. -A FORWARD -p TCP ! --syn -m state --state NEW -j DROP
    
49. # 处理IP碎片数量,防止攻击,允许每秒100个
    
50. -A FORWARD -f -m limit --limit 100/s --limit-burst 100 -j ACCEPT
    
51. # 设置ICMP包过滤,允许每秒1个包,限制触发条件是10个包.
    
52. -A FORWARD -p icmp -m limit --limit 1/s --limit-burst 10 -j ACCEPT
    
53. # 禁止非法连接
    
54. -A FORWARD -m state --state INVALID -j DROP
    
55. # 防止SYN攻击 轻量
    
56. -N syn-flood
    
57. -A INPUT -p tcp --syn -j syn-flood
    
58. -A syn-flood -p tcp -m limit --limit 3/s --limit-burst 6 -j RETURN
    
59. -A syn-flood -j REJECT
    
60. # 防止php-ddos对外udp发包
    
61. -I OUTPUT -p udp --dport 53 -d 208.87.241.170 -j ACCEPT
    
62. -A OUTPUT -p udp -j DROP
    
63. # 拒绝非法连接
    
64. -A INPUT   -m state --state INVALID -j DROP
    
65. -A OUTPUT  -m state --state INVALID -j DROP
    
66. # 禁止其他未允许的规则访问（注意：如果22端口未加入允许规则，SSH链接会直接断开。）
    
67. -A INPUT -j REJECT
    
68. -A FORWARD -j REJECT
    
69. 
    
70. COMMIT
    
71. # Completed on Wed Jan 16 02:43:43 2013

复制代码

请问是什么问题引起的呢？

licess

重新save一下iptable再restart一下看看试试