Messages

Thanks for your inputs.   Time being I am not using Beta version and using alpha version only(recovered using from clonezilla disk backup).

Once again thanks for the same.

LinuxMCE with alpha was working fine with out using nvidia card drivers(used vesa).  I have fresh installation done on the Asus m2n68-vm with LinuxMCE-0810 beta scripts i.e. new-installer-beta2.tar.gz Dated:03-Dec-2009 17:02 file size:12K.

pre-install-from-repo.sh, mce-install.sh, post-install.sh installation went well and after restarting the system says  "AVWizard Failed to setup X <OK>"

a. tty1 shows:
   Begins Nvidia driver installation..
   *************************
   Card detected: 00:12:0 VGA compatible controller[0300]: nvidia corportation Geforce 7050 PV/ nForce 630a [10de:053b] (rev a2)
   ...
   LinuxMCE prefers driver nvidia-glx-195
   ...
   Preferred LinuxMCE prefers driver nvidia-glx-195 already installed.
   *************************
   End Nvidia driver installation
   *************************
   LOG: == End Nvidia...

--> strucks here

b. i have copied existing(before nvidia installtion) /etc/X11/xorg.conf copied back but beta replaces the file. Problem still exist.

c. while running ./post-install.sh, observed the following:
   ..  
   End Nvidia driver installation
   *************************
   LOG: == End Nvidia driver installation
   post-installation-common.sh: line 123: restoreKdmInitScript: command not found
   removed '/etc/rc3.d/README'
   ..
   Remove softlink to start KDM
   removing any system startup
   ..
   /etc/rc6.d/K01kdm
You must specify at least one of -c, -u, or -d
Usage: /usr/sbin/update-initramf [OPTION]...
-k[version] specify kernel version or 'all'
..


d: #dmesg    |grep nvidia
     nvidia: module lincese 'NVIDIA' taint kernel.
     nvidia  PCI INT A -> Link[SGRU] -> GSI 20 (level, low) -> IRQ20
     nvidia setting latency timer to 64

e: # cat /var/log/messages
    NVRM: loading NVIDIA UNIX x86 Kernel Module 195.22
    allocation failed: out of vmalloc space- use vmalloc=<size> to increase size
    NVRM: failed to map registers
    NVRM: RmInitAdapter failed! (0x..

seeking your help to resolve the issues

Thanks in advance.

Joseph, I have updated the following link for webmin & dg webmin module and please verify the same.

http://wiki.linuxmce.org/index.php/Installing_Dansguardian_on_LinuxMCE

Thanks,
Srinivasu Anupindi

I have moved the document to http://wiki.linuxmce.org/index.php/Installing_Dansguardian_on_LinuxMCE location and is it in the right location?  I request you all to check line by line and modify as per the standards so that we can finalize the same.

Joseph: dg log view link is not pointing to right page could you update in the details in the wiki. 

Thanks
Srinivasu anupindi

hi,
Give me a day time I will update with with proper comments, I was stuck with some other system while configuring same thing.

You can also modify my temp wiki as per the needs so that(I will just cut & paste) once I post it on the linuxMCE site I will remove the my wiki post.

My issue was as follows and not able to figure out cause and resolution of the issue and because of this tinyproxy not listening and forwarding.
tinyproxy staring but /etc/log/tinyproxy.log says
"Accepting connections. CONNECT
read request_request_line:Client (file description:7) closed socket before read."

Thanks

Sure, just for draft I did it, once it finalized we will post in respective location and I will remove from my wiki.  Is it ok?

On your request i have modified the post and put the contents at the following wiki and you suggestions are welcome:

Please go through the draft dansgaurdian installation steps at wiki:
http://en.wikipedia.org/wiki/User:Anupindi007

Hi,
I haven't tested with Squid but I have configured shorewall and shorewall is working well with MCE with out any problems.   But Yesterday I had issues with RAID(broken) I don't think shorewall is anything to do with RAID(mdadm - I have already posted details too).  I will post the rest dansguardian.conf and tinyproxy.conf files too and I appreciate if you test from your end before posting in wiki.


Please go through the draft dansgaurdian installation steps at wiki:
http://en.wikipedia.org/wiki/User:Anupindi007

Thanks,
Srinivas

Hi,
mdadm raid contains 6 hard disks, in that now mdadm shows 2 is activ sync and other 4 shows removed.  Any one can help on this same and thanks in advance.
Srinivas

Details as follows:

# mdadm --detail /dev/md0
mdadm: md device /dev/md0 does not appear to be active.


#cat /proc/mdstat
Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] [raid10]
md0 : inactive sdb1[4](S) sda1[5](S) sdd1[3](S) sdg1[2](S) sdf1[1](S) sde1[0](S)
      5860559616 blocks

#mdadm -QE --scan
ARRAY /dev/md0 level=raid5 num-devices=6 UUID=7395e18d:4088dc27:bd9f1658:0a1d2015

#mdadm -As /dev/md0
mdadm: /dev/md0 assembled from 2 drives - not enough to start the array.



#cat /etc/mdadm/mdadm.conf
DEVICE partitions
ARRAY /dev/md0 level=raid5 num-devices=6 metadata=0.90 spares=1 UUID=7395e18d:4088dc27:bd9f1658:0a1d2015

Note:  I am not able to see "devices= /dev/sdg1,/dev/sdf1,/dev/sde1,/dev/sdd1,/dev/sdb1,/dev/sda1" and "auto=yes" in the "/etc/mdadm/mdadm.conf" file



-- initial RAID devices as follows:
0   /dev/sde1
1   /dev/sdf1
2   /dev/sdg1
3   /dev/sdd1
4   /dev/sdb1
5   /dev/sda1


#mdadm --detail /dev/md0
/dev/md0:                                             
        Version : 00.90                               

Creation Time : Sun Jun 7 11:29:40 2009
Raid Level : raid5
Used Dev Size : 976759936 (931.51 GiB 1000.20 GB)

   Raid Devices : 6
  Total Devices : 2
Preferred Minor : 0
    Persistence : Superblock is persistent

Update Time : Mon Aug 17 08:16:35 2009
          State : active, degraded, Not Started

Active Devices : 2
Working Devices : 2
Failed Devices : 0
  Spare Devices : 0


Layout : left-symmetric
Chunk Size : 64K

UUID : 7395e18d:4088dc27:bd9f1658:0a1d2015
         Events : 0.650340


Number Major Minor RaidDevice State
0 0 0 0 removed
       1       0        0        1      removed
       2       0        0        2      removed
       3       0        0        3      removed

4 8 17 4 active sync /dev/sdb1
       5       8        1        5      active sync   /dev/sda1



#mdadm -R /dev/md0
mdadm: failed to run array /dev/md0: Input/output error


# mdadm -E /dev/sda1
/dev/sda1:                             
          Magic : a92b4efc             
        Version : 00.90.00             
           UUID : 7395e18d:4088dc27:bd9f1658:0a1d2015
  Creation Time : Sun Jun  7 11:29:40 2009           
     Raid Level : raid5                             
  Used Dev Size : 976759936 (931.51 GiB 1000.20 GB)
     Array Size : 4883799680 (4657.55 GiB 5001.01 GB)
   Raid Devices : 6
  Total Devices : 6
Preferred Minor : 0

    Update Time : Mon Aug 17 08:16:35 2009
          State : clean
Active Devices : 2
Working Devices : 2
Failed Devices : 3
  Spare Devices : 0
       Checksum : f4088e0f - correct
         Events : 650340

         Layout : left-symmetric
     Chunk Size : 64K

      Number   Major   Minor   RaidDevice State
this     5       8        1        5      active sync   /dev/sda1

   0     0       0        0        0      removed
   1     1       0        0        1      faulty removed
   2     2       0        0        2      faulty removed
   3     3       0        0        3      faulty removed
   4     4       8       17        4      active sync   /dev/sdb1
   5     5       8        1        5      active sync   /dev/sda1




# mdadm -E /dev/sdb1
/dev/sdb1:                             
          Magic : a92b4efc             
        Version : 00.90.00             
           UUID : 7395e18d:4088dc27:bd9f1658:0a1d2015
  Creation Time : Sun Jun  7 11:29:40 2009           
     Raid Level : raid5                             
  Used Dev Size : 976759936 (931.51 GiB 1000.20 GB)
     Array Size : 4883799680 (4657.55 GiB 5001.01 GB)
   Raid Devices : 6
  Total Devices : 6
Preferred Minor : 0

    Update Time : Mon Aug 17 08:16:35 2009
          State : clean
Active Devices : 2
Working Devices : 2
Failed Devices : 3
  Spare Devices : 0
       Checksum : f4088e1d - correct
         Events : 650340

         Layout : left-symmetric
     Chunk Size : 64K

      Number   Major   Minor   RaidDevice State
this     4       8       17        4      active sync   /dev/sdb1

   0     0       0        0        0      removed
   1     1       0        0        1      faulty removed
   2     2       0        0        2      faulty removed
   3     3       0        0        3      faulty removed
   4     4       8       17        4      active sync   /dev/sdb1
   5     5       8        1        5      active sync   /dev/sda1


# mdadm -E /dev/sdd1     
/dev/sdd1:                                   
          Magic : a92b4efc                   
        Version : 00.90.00                   
           UUID : 7395e18d:4088dc27:bd9f1658:0a1d2015
  Creation Time : Sun Jun  7 11:29:40 2009           
     Raid Level : raid5                             
  Used Dev Size : 976759936 (931.51 GiB 1000.20 GB)
     Array Size : 4883799680 (4657.55 GiB 5001.01 GB)
   Raid Devices : 6
  Total Devices : 6
Preferred Minor : 0

    Update Time : Mon Aug 17 08:15:41 2009
          State : clean
Active Devices : 6
Working Devices : 6
Failed Devices : 0
  Spare Devices : 0
       Checksum : f4088db3 - correct
         Events : 650334

         Layout : left-symmetric
     Chunk Size : 64K

      Number   Major   Minor   RaidDevice State
this     3       8       49        3      active sync   /dev/sdd1

   0     0       8       65        0      active sync   /dev/sde1
   1     1       8       81        1      active sync   /dev/sdf1
   2     2       8       97        2      active sync   /dev/sdg1
   3     3       8       49        3      active sync   /dev/sdd1
   4     4       8       17        4      active sync   /dev/sdb1
   5     5       8        1        5      active sync   /dev/sda1


#dm -E /dev/sde1
/dev/sde1:                             
          Magic : a92b4efc             
        Version : 00.90.00             
           UUID : 7395e18d:4088dc27:bd9f1658:0a1d2015
  Creation Time : Sun Jun  7 11:29:40 2009           
     Raid Level : raid5                             
  Used Dev Size : 976759936 (931.51 GiB 1000.20 GB)
     Array Size : 4883799680 (4657.55 GiB 5001.01 GB)
   Raid Devices : 6
  Total Devices : 6
Preferred Minor : 0

    Update Time : Mon Aug 17 08:15:41 2009
          State : clean
Active Devices : 6
Working Devices : 6
Failed Devices : 0
  Spare Devices : 0
       Checksum : f4088dbd - correct
         Events : 650334

         Layout : left-symmetric
     Chunk Size : 64K

      Number   Major   Minor   RaidDevice State
this     0       8       65        0      active sync   /dev/sde1

   0     0       8       65        0      active sync   /dev/sde1
   1     1       8       81        1      active sync   /dev/sdf1
   2     2       8       97        2      active sync   /dev/sdg1
   3     3       8       49        3      active sync   /dev/sdd1
   4     4       8       17        4      active sync   /dev/sdb1
   5     5       8        1        5      active sync   /dev/sda1


# mdadm -E /dev/sdf1
/dev/sdf1:                             
          Magic : a92b4efc             
        Version : 00.90.00             
           UUID : 7395e18d:4088dc27:bd9f1658:0a1d2015
  Creation Time : Sun Jun  7 11:29:40 2009           
     Raid Level : raid5                             
  Used Dev Size : 976759936 (931.51 GiB 1000.20 GB)
     Array Size : 4883799680 (4657.55 GiB 5001.01 GB)
   Raid Devices : 6
  Total Devices : 6
Preferred Minor : 0

    Update Time : Mon Aug 17 08:15:41 2009
          State : clean
Active Devices : 6
Working Devices : 6
Failed Devices : 0
  Spare Devices : 0
       Checksum : f4088dcf - correct
         Events : 650334

         Layout : left-symmetric
     Chunk Size : 64K

      Number   Major   Minor   RaidDevice State
this     1       8       81        1      active sync   /dev/sdf1

   0     0       8       65        0      active sync   /dev/sde1
   1     1       8       81        1      active sync   /dev/sdf1
   2     2       8       97        2      active sync   /dev/sdg1
   3     3       8       49        3      active sync   /dev/sdd1
   4     4       8       17        4      active sync   /dev/sdb1
   5     5       8        1        5      active sync   /dev/sda1

# mdadm -E /dev/sdg1                                       
/dev/sdg1:                                                                     
          Magic : a92b4efc                                                     
        Version : 00.90.00                                                     
           UUID : 7395e18d:4088dc27:bd9f1658:0a1d2015                         
  Creation Time : Sun Jun  7 11:29:40 2009                                     
     Raid Level : raid5                                                       
  Used Dev Size : 976759936 (931.51 GiB 1000.20 GB)
     Array Size : 4883799680 (4657.55 GiB 5001.01 GB)
   Raid Devices : 6
  Total Devices : 6
Preferred Minor : 0

    Update Time : Mon Aug 17 08:15:41 2009
          State : clean
Active Devices : 6
Working Devices : 6
Failed Devices : 0
  Spare Devices : 0
       Checksum : f4088de1 - correct
         Events : 650334

         Layout : left-symmetric
     Chunk Size : 64K

      Number   Major   Minor   RaidDevice State
this     2       8       97        2      active sync   /dev/sdg1

   0     0       8       65        0      active sync   /dev/sde1
   1     1       8       81        1      active sync   /dev/sdf1
   2     2       8       97        2      active sync   /dev/sdg1
   3     3       8       49        3      active sync   /dev/sdd1
   4     4       8       17        4      active sync   /dev/sdb1
   5     5       8        1        5      active sync   /dev/sda1

sorry guys for delay in replying..  Please find shorewall.conf file details.

-->
##############################################################################
#  /etc/shorewall/shorewall.conf V4.0 - Change the following variables to
#  match your setup
#
#  This program is under GPL
#  [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
#
#  This file should be placed in /etc/shorewall
#
#  (c) 1999,2000,2001,2002,2003,2004,2005,
#      2006,2007 - Tom Eastep (teastep@shorewall.net)
#
#  For information about the settings in this file, type "man shorewall.conf"
#
#  Additional information is available at
#  http://www.shorewall.net/Documentation.htm#Conf
###############################################################################
#             S T A R T U P   E N A B L E D
###############################################################################

STARTUP_ENABLED=Yes

###############################################################################
#                    V E R B O S I T Y
###############################################################################

VERBOSITY=1

###############################################################################
#                              C O M P I L E R
#      (setting this to 'perl' requires installation of Shorewall-perl)
###############################################################################

SHOREWALL_COMPILER=

###############################################################################
#                L O G G I N G
###############################################################################

LOGFILE=/var/log/messages

LOGFORMAT="Shorewall:%s:%s:"

LOGTAGONLY=No

LOGRATE=

LOGBURST=

LOGALLNEW=

BLACKLIST_LOGLEVEL=

MACLIST_LOG_LEVEL=info

TCP_FLAGS_LOG_LEVEL=info

RFC1918_LOG_LEVEL=info

SMURF_LOG_LEVEL=info

LOG_MARTIANS=No

###############################################################################
#   L O C A T I O N     O F   F I L E S   A N D   D I R E C T O R I E S
###############################################################################

IPTABLES=

PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin

SHOREWALL_SHELL=/bin/sh

SUBSYSLOCK=""

MODULESDIR=

CONFIG_PATH=/etc/shorewall:/usr/share/shorewall

RESTOREFILE=

IPSECFILE=zones

LOCKFILE=

###############################################################################
#      D E F A U L T   A C T I O N S / M A C R O S
###############################################################################

DROP_DEFAULT="Drop"
REJECT_DEFAULT="Reject"
ACCEPT_DEFAULT="none"
QUEUE_DEFAULT="none"
NFQUEUE_DEFAULT="none"

###############################################################################
#                        R S H / R C P  C O M M A N D S
###############################################################################

RSH_COMMAND='ssh ${root}@${system} ${command}'
RCP_COMMAND='scp ${files} ${root}@${system}:${destination}'

###############################################################################
#         F I R E W A L L     O P T I O N S
###############################################################################

##anupindi007 changed = On ##IP_FORWARDING=Keep
IP_FORWARDING=On

ADD_IP_ALIASES=Yes

ADD_SNAT_ALIASES=No

RETAIN_ALIASES=No

TC_ENABLED=Internal

TC_EXPERT=No

CLEAR_TC=Yes

MARK_IN_FORWARD_CHAIN=No

CLAMPMSS=No

ROUTE_FILTER=Yes

DETECT_DNAT_IPADDRS=No

MUTEX_TIMEOUT=60

ADMINISABSENTMINDED=Yes

BLACKLISTNEWONLY=Yes

DELAYBLACKLISTLOAD=No

MODULE_SUFFIX=

DISABLE_IPV6=Yes

BRIDGING=No

DYNAMIC_ZONES=No

PKTTYPE=Yes

RFC1918_STRICT=No

MACLIST_TABLE=filter

MACLIST_TTL=

SAVE_IPSETS=No

MAPOLDACTIONS=No

FASTACCEPT=No

IMPLICIT_CONTINUE=Yes

HIGH_ROUTE_MARKS=No

USE_ACTIONS=Yes

OPTIMIZE=0

EXPORTPARAMS=Yes

EXPAND_POLICIES=Yes

KEEP_RT_TABLES=No

DELETE_THEN_ADD=Yes

MULTICAST=No

DONT_LOAD=

###############################################################################
#         P A C K E T   D I S P O S I T I O N
###############################################################################

BLACKLIST_DISPOSITION=DROP

MACLIST_DISPOSITION=REJECT

TCP_FLAGS_DISPOSITION=DROP

#LAST LINE -- DO NOT REMOVE
<--

/etc/shorewall/interfaces file looks like:
#ZONE   INTERFACE   BROADCAST   OPTIONS
net eth0 detect dhcp,tcpflags
loc eth1 detect dhcp
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

/etc/shorewall/rules file looks like:
#SECTION RELATED
SECTION NEW
ACCEPT net fw tcp 88
ACCEPT loc net tcp 80
REDIRECT loc 8081 tcp www
ACCEPT net fw tcp 22
ACCEPT loc fw tcp 22
ACCEPT net fw icmp
ACCEPT loc loc icmp
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE


/etc/shorewall/masq files looks like:
#INTERFACE      SOURCE      ADDRESS      PROTO   PORT(S)   IPSEC   MARK
eth0 eth1
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE


/etc/shorewall/policy file looks like:
#SOURCE      DEST      POLICY      LOG      LIMIT:BURST
#                  LEVEL
loc all ACCEPT
net all DROP
fw all ACCEPT
all all REJECT
#LAST LINE -- DO NOT REMOVE

/etc/shorewall/zone file looks like:
#ZONE   TYPE      OPTIONS      IN         OUT
#               OPTIONS         OPTIONS
fw   firewall
net ipv4
loc ipv4
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

Please let me know if you required dansgaurdian.conf and tinyproxy.conf files too.
Thanks,
anupindi007

I have figured out another way to resolve the issue i.e. using shorewall (http://taksuyama.com/?page_id=23).  Now dansgaurdian is working for me.

Before updating iptables with the following commands, i would like to cross check with you whether I am understood right on the same or not:
-->
#iptables -A INPUT -i eth0 -p tcp --dport 80 -j ACCEPT
#iptables -A INPUT -i eth0 -p tcp --dport 8081 -j ACCEPT
#iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8081
#iptables -A OUTPUT -s 127.0.0.1 -d 127.0.0.1 -p tcp --dport 8081 -j ACCEPT
#iptables -t nat -A OUTPUT -p tcp  --dport 80 -j REDIRECT --to-ports 8081
<--


system shows: #iptables-save > /root/working.iptables.rules
--->
# Generated by iptables-save v1.4.0 on Mon Aug 17 08:26:13 2009
*mangle
:PREROUTING ACCEPT [89978:48077510]
:INPUT ACCEPT [89883:48048067]
:FORWARD ACCEPT [93:27669]
:OUTPUT ACCEPT [66181:5988383]
:POSTROUTING ACCEPT [66459:6048043]
-A PREROUTING -j TTL --ttl-set 255
COMMIT
# Completed on Mon Aug 17 08:26:13 2009
# Generated by iptables-save v1.4.0 on Mon Aug 17 08:26:13 2009
*nat
:PREROUTING ACCEPT [28:3703]
:POSTROUTING ACCEPT [4592:343381]
:OUTPUT ACCEPT [4592:343381]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.80.1:8081
-A PREROUTING -i eth0 -p tcp -m tcp --dport 3877 -j DNAT --to-destination 192.168.80.1:3877
-A POSTROUTING -s 192.168.80.0/24 -d ! 192.168.80.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Mon Aug 17 08:26:13 2009
# Generated by iptables-save v1.4.0 on Mon Aug 17 08:26:13 2009
*filter
:INPUT DROP [86:11364]
:FORWARD ACCEPT [93:27669]
:OUTPUT ACCEPT [66181:5988383]
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -m mark --mark 0x1 -j ACCEPT
-A INPUT -p udp -m udp --dport 67 -j ACCEPT
-A INPUT -s 192.168.80.0/24 -j ACCEPT
-A INPUT -p udp -m udp --dport 4569 -j ACCEPT
-A INPUT -p udp -m udp --dport 5060 -j ACCEPT
-A INPUT -p udp -m udp --dport 2000 -j ACCEPT
-A FORWARD -o ppp+ -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
COMMIT
<---
Thanks in advance.

Thanks colinjones for your mesg, I apologise for delay in reply and in fact I was away from the system hence I couldn't verify.  I will get back you soon on the same.

Thanks for your mesg merkur2k and is there any way to fix(forward port 80 to 8081)?

Hi,
I am trying to avoid setting proxy server on every machine on my network.  I am hoping that directing the 80 traffic through DG (8081) on mce server will help me do this.  MCE server is the DHCP server for all my nodes on the netwrok and sits between the DSL router and my internal network.

I Installed Dansguardian (http://wiki.linuxmce.org/index.php/Installing_Dansguardian) and Configured Firewall to forward port 80 to port 8081 on server(192.168.80.1).  

I thought this should work without setting proxy at the browser.  However, the content filtering is happening only when I set the proxy to to 192.168.80.1:8081 at the browser.  

Already set:LinuxMCE Admin Website Advanced > Network > Firewall Rules and added a new rule tcp 80 to 0 8081 192.168.80.1 port_forward.

"# iptables -L" shows the following (do not see the 80 to 8081 fwding I set through mce admin):

Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             anywhere            MARK match 0x1
ACCEPT     udp  --  anywhere             anywhere            udp dpt:bootps
ACCEPT     all  --  192.168.80.0/24      anywhere
ACCEPT     udp  --  anywhere             anywhere            udp dpt:iax
ACCEPT     udp  --  anywhere             anywhere            udp dpt:sip
ACCEPT     udp  --  anywhere             anywhere            udp dpt:2000

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
TCPMSS     tcp  --  anywhere             anywhere            tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination


What am I missing?  

Thanks
Srinivas