Installation from os - Non working iptables example

Latest response

This error is about:


RHEV 3 Beta. Lab 7 Objetives. 1. Install Red Hat Enterprise Linux Hosts.


I am trying to install an Hypervisor from an installed RHEL OS.


The iptables example is:


:OUTPUT ACCEPT [10765:598664]
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp --dport 22 -j ACCEPT
-A INPUT -p tcp --dport 16514 -j ACCEPT
-A INPUT -p tcp --dport 54321 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 5634:6166 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 49152:49216 -j ACCEPT 
-A INPUT -p tcp -m state --state NEW -m
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -m physdev ! --physdev-is-bridged -j REJECT --reject-with icmp-host-prohibited

Unfortunately this did not work. I had to make two changes for this to work.


First change is to add:


at the very first beginning.


Second change is to remove -m from:

-A INPUT -p tcp -m state --state NEW -m

so that it reads:

-A INPUT -p tcp -m state --state NEW

as the iptables reload complains about -m needing to have an argument.



Are these changes ok? Or do you recommend other settings?

If there is a bug on the documentation please fix it for other users.


Thank you!



Above should be there by default at the beginning of /etc/sysconfig/iptables file on every standard installation of RHEL6. Did you remove that before?

Second change is to remove -m from:

I didn't see it at


Check section 5b.


Where did you see it?

I've filed a bug for the extra "-m"


Thanks for pointing this out