RetroFed Forum
Your home away from modern life.
[artix/open-rc/iptables] Why did I have to manually load the ip_tables module?
Post Reply
AuthorMessage
printf("%s", name); piefed.blahaj.zone akunohana@piefed.blahaj.zone
Joined: 2026-03-30
(edited) Quote

I was setting up iptables like I have done a billion times before, but when trying to /etc/init.d/iptables save, it said that the kernel doesn't have support for it. Wut? So I load ip_tables with modprobe, only to lose it after a reboot, so I shoved it into modules in mkinitcpio.conf, which seems to have helped.

What's going on? Are we forcibly moving on to nftables?

21   Original
mlfh lm.mlfh.org mlfh@lm.mlfh.org
Joined: 2026-04-07
#2 · Quote Reply

In most cases these days, "iptables" is just a compatibility layer for nftables, translating iptables commands and syntax to nftables rules.

7
printf("%s", name); piefed.blahaj.zone akunohana@piefed.blahaj.zone
Joined: 2026-03-30
#3 · Quote Reply

In most cases these days, "iptables" is just a compatibility layer for nftables, translating iptables commands and syntax to nftables rules.

I see! Thanks! Still wonder why the module was/is absent in Artix. 🤔

2
non_burglar lemmy.world non_burglar@lemmy.world
Joined: 2023-06-16
#4 · Quote Reply

The default fw in artix is nftables. It's just a wrapper for iptables, but you're best to make your changes in nftables, not iptables, if for no other reason than to not potentially break a future upgrade.

This is just the older init way to load sysctl and other modules.

When you move to or remain in an rc.d or init service mgmt system, you can't depend on systemd making your unit files and setting them up to load.

5
Aary lemmy.ml aary@lemmy.ml
Joined: 2026-05-17
#5 · (edited) Quote Reply

«I load ip_tables with modprobe, only to lose it after a reboot»

Write the module name into:
/etc/modules-load.d/.conf — on most modern systemd distributions (Ubuntu, Arch, Fedora, etc.)
or /etc/modules on Debian-style systems.

OpenRC's modules-load service reads configuration files from the following locations, in order of precedence
/usr/lib/modules-load.d/
/run/modules-load.d/
/etc/modules-load.d/

echo "ip_tables" >/etc/modules-load.d/ip_tables.conf

3
printf("%s", name); piefed.blahaj.zone akunohana@piefed.blahaj.zone
Joined: 2026-03-30
#6 · Quote Reply

«I load ip_tables with modprobe, only to lose it after a reboot» Write the module name into: /etc/modules-load.d/.conf — on most modern systemd distributions (Ubuntu, Arch, Fedora, etc.) or /etc/modules on Debian-style systems. OpenRC's modules-load service reads configuration files from the following locations, in order of precedence /usr/lib/modules-load.d/ /run/modules-load.d/ /etc/modules-l...

Thanks!

1
eleijeep piefed.social eleijeep@piefed.social
Joined: 2025-09-22
#7 · Quote Reply

It's worth learning nftables, it's actually pretty cool.

9
printf("%s", name); piefed.blahaj.zone akunohana@piefed.blahaj.zone
Joined: 2026-03-30
#8 · Quote Reply

It's worth learning nftables, it's actually pretty cool.

No doubt! It's on my TODO. 🫡

1
melroy kbin.melroy.org melroy@kbin.melroy.org
Joined: 2023-06-20
#9 · Quote Reply

No doubt! It's on my TODO. 🫡

yea I never looked back after nftables.

1
Post Reply
Back to top