Unable to start server (iptables issue)

rossdargan

I'm running openvpn on a server provided by a VPS supplier (running Ubuntu 14.04.40

The error message shown when I try to start the service is: iptables service not started because of error (SVC_RUN_EXCEPT)

Looking at the openvpn.log file I can see the following

2016-03-09 09:06:28-0500 [-] WEB OUT: '2016-03-09 09:06:28-0500 [-] Web server running as UID 1002'
2016-03-09 09:06:28-0500 [-] iptables-PP ERR: 'iptables: No chain/target/match by that name.'
2016-03-09 09:06:28-0500 [-] Service deferred error: iptables capabilities error: ('Error verifying iptables capabilities when running following command', ('/sbin/iptables', '-A', 'FORWARD', '-d', '127.77.88.99', '-m', 'mark', '--mark', '0x12345678/0x12345678', '-j', 'DROP'))
2016-03-09 09:06:28-0500 [-] iptables service not started because of error (SVC_RUN_EXCEPT)
2016-03-09 09:06:28-0500 [-] iptables service not started because of error (SVC_RUN_EXCEPT)
2016-03-09 09:06:28-0500 [-] Server Agent initialization status: {'errors': {'iptables_web': [('error', "Service deferred error: iptables capabilities error: ('Error verifying iptables capabilities when running following command', ('/sbin/iptables', '-A', 'FORWARD', '-d', '127.77.88.99', '-m', 'mark', '--mark', '0x12345678/0x12345678', '-j', 'DROP'))")], 'iptables_openvpn': [('error', 'iptables service not started because of error (SVC_RUN_EXCEPT)')], 'ip6tables_openvpn': [('error', 'iptables service not started because of error (SVC_RUN_EXCEPT)')], 'ip6tables_live': [('error', "service failed to start due to unresolved dependencies: set(['ip6tables_openvpn'])")], 'openvpn_0': [('error', "service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn'])")], 'user': [('error', "service failed to start due to unresolved dependencies: set(['iptables_live', 'iptables_openvpn', 'ip6tables_openvpn', 'ip6tables_live'])")], 'iptables_live': [('error', "service failed to start due to unresolved dependencies: set(['iptables_openvpn', 'ip6tables_live'])")], 'crl': [('error', "service failed to start due to unresolved dependencies: set(['user'])")], 'openvpn_1': [('error', "service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn'])")]}, 'service_status': {'bridge': 'started', 'log': 'started', 'license': 'started', 'iptables_web': 'off', 'iptables_openvpn': 'off', 'ip6tables_openvpn': 'off', 'openvpn_1': 'off', 'auth': 'started', 'ip6tables_live': 'off', 'client_query': 'started', 'api': 'started', 'daemon_pre': 'started', 'web': 'started', 'db_push': 'started', 'iptables_live': 'off', 'openvpn_0': 'off', 'crl': 'off', 'user': 'off'}}

If I try and run the command it's failing with I get the following:

admin@admin:~$ sudo /sbin/iptables -A 'FORWARD' -d 127.77.88.99 -m mark --mark 0x12345678/0x12345678 -j DROP
iptables: No chain/target/match by that name.
.

Now I have had problems with the VPS host before where they changed something, and then changed it back and fixed it, but they are insisting that this is an issue with my config (even though it has worked for ages without any issues then suddenly broke).

Anyway, I'm really an amateur with linux so I'd appreciate any help you can n give me :-)

Pippin

No chain/target/match by that name

Did you try

FORWARD

instead of

'FORWARD'

rossdargan

Thanks, I hadn't but it still gives the same error.

Traffic

rossdargan wrote'm running openvpn on a server provided by a VPS supplier

Ask them to install iptables correctly .. it looks like some dependencies have not been met:

rossdargan wroteservice failed to start due to unresolved dependencies

rossdargan

Yeah, I'm trying to - they are convinced it's my problem :/

Ok, I'll try going back to them.

Traffic

Without using openvpn .. just try $ sudo iptables -L

rossdargan

This is the output I get from that command:

Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Traffic

Can you manually add any rules to iptables ?

rossdargan

I believe so, yes.

Traffic

The best I can offer is to re-install Openvpn-AccessServer

You may want to try the Access Server support channel:
https://openvpn.net/index.php/login.html

Or just use OpenVPN-CommunityEdition, which is totally free.
http://openvpn.net/index.php/download/community-downloads.html

rossdargan

I upgraded to 2.0.25 but that didn't help. This is the error I'm seeing - not sure if it offers any more insight?

2016-03-10 07:48:56-0500 [-] Server Agent initialization status: {'errors': {'iptables_web': [('error', "Service deferred error: iptables capabilities error: ('Error verifying iptables capabilities when running following command', ('/sbin/iptables', '-A', 'FORWARD', '-d', '127.77.88.99', '-m', 'mark', '--mark', '0x12345678/0x12345678', '-j', 'DROP'))")], 'iptables_openvpn': [('error', 'iptables service not started because of error (SVC_RUN_EXCEPT)')], 'ip6tables_openvpn': [('error', 'iptables service not started because of error (SVC_RUN_EXCEPT)')], 'ip6tables_live': [('error', "service failed to start due to unresolved dependencies: set(['ip6tables_openvpn'])")], 'openvpn_0': [('error', "service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn'])")], 'user': [('error', "service failed to start due to unresolved dependencies: set(['iptables_live', 'iptables_openvpn', 'ip6tables_openvpn', 'ip6tables_live'])")], 'iptables_live': [('error', "service failed to start due to unresolved dependencies: set(['iptables_openvpn', 'ip6tables_live'])")], 'crl': [('error', "service failed to start due to unresolved dependencies: set(['user'])")], 'openvpn_1': [('error', "service failed to start due to unresolved dependencies: set(['user', 'iptables_live', 'iptables_openvpn'])")]}, 'service_status': {'bridge': 'started', 'log': 'started', 'license': 'started', 'iptables_web': 'off', 'iptables_openvpn': 'off', 'ip6tables_openvpn': 'off', 'openvpn_1': 'off', 'auth': 'started', 'ip6tables_live': 'off', 'client_query': 'started', 'api': 'started', 'daemon_pre': 'started', 'web': 'started', 'db_push': 'started', 'iptables_live': 'off', 'openvpn_0': 'off', 'crl': 'off', 'user': 'off'}}