Core 164: Module nf_log_ipv4 not found in directory

Getting Started with IPFire Updates Trouble
1

I got this error when upgrading from 163 to 164:

Setting up firewall
modprobe: FATAL: Module nf_log_ipv4 not found in directory /lib/modules/5.15.6-ipfire
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.

Didn’t notice any consequences because of this. Maybe it’s still waiting for me to be found later.

2

Hi,

this should not happen indeed. :expressionless:

Do you have custom rules in the firewall.local script in place?

Also, since Core Update 164 updated the Linux kernel to 5.15.23, do these errors persist after a reboot?

Thanks, and best regards,
Peter MĂĽller

3

Hi Peter,

custom rules: yes, all of them look something like this (used for IPsec):
iptables -t nat -A CUSTOMPOSTROUTING -s 192.168.120.0/24 -d 10.192.0.0/16 -j NETMAP --to 10.160.74.0/24

reboot: I don’t have a monitor attached and cannot easily restart the box. “dmesg | grep chain” shows no results. Didn’t notice any further problems. IPsec connections run fine.

4

I today got the “No chain/target/match by that name.” when updating to Core 165, but not when updating to Core 166.

Did not get the error “Module nf_log_ipv4 not found in directory” on both updates.

5

Hi,

that is kind of expected, since Core Update 166 only featured the fixed backup script and a patch for zlib. There wasn’t anything vaguely related to the kernel in it. :slight_smile:

What is the output of the following commands on your IPFire machine?

grep -r nf_log_ipv4 /lib/modules/5.15.23-ipfire/
modinfo nf_log_ipv4

The firewall.local rule does not look suspicious or related to me, by the way.

Thanks, and best regards,
Peter MĂĽller

1 Like
6 
atl-ipfire:~# grep -r nf_log_ipv4 /lib/modules/5.15.23-ipfire/
/lib/modules/5.15.23-ipfire/modules.alias:alias nf_log_ipv4 nf_log_syslog

atl-ipfire:~# modinfo nf_log_ipv4
filename:       /lib/modules/5.15.23-ipfire/kernel/net/netfilter/nf_log_syslog.ko.xz
alias:          nf-logger-10-0
alias:          nf-logger-5-0
alias:          nf-logger-3-0
alias:          nf-logger-2-0
alias:          nf-logger-7-0
alias:          nf_log_netdev
alias:          nf_log_ipv6
alias:          nf_log_ipv4
alias:          nf_log_bridge
alias:          nf_log_arp
license:        GPL
description:    Netfilter syslog packet logging
author:         Netfilter Core Team <coreteam@netfilter.org>
srcversion:     2F59EA54436111778D12E6A
depends:
retpoline:      Y
intree:         Y
name:           nf_log_syslog
vermagic:       5.15.23-ipfire SMP mod_unload modversions
sig_id:         PKCS#7
signer:         Build time autogenerated kernel key
sig_key:        57:80:61:42:95:C5:E3:11:F1:7F:B2:00:96:38:B0:42:1B:E4:01:C1
sig_hashalgo:   sha512
signature:      30:65:02:30:12:CF:8C:4E:AE:EF:67:0D:31:25:2D:88:41:E1:72:BE:
                49:30:E1:E6:F1:77:87:31:F5:61:3C:C0:29:47:A9:3F:E9:C3:0B:74:
                CF:0B:60:FF:8D:A1:75:DC:46:F9:02:2E:02:31:00:89:2F:49:92:7E:
                EA:35:B2:23:2B:AE:6A:3E:FF:08:F6:FA:04:79:3C:FA:BC:1E:0B:9B:
                EF:B7:27:8A:9D:4B:C8:7B:83:D4:5C:D5:6D:C7:6F:91:3F:E3:97:0F:
                8D:BC:DF