[GH-ISSUE #338] Fedora server 37 with docker #313

Closed
opened 2026-03-02 08:01:17 +03:00 by kerem · 2 comments
Owner

Originally created by @brego81 on GitHub (Dec 31, 2022).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/338

Describe the issue
When running the docker on fedora server 37 with default parameters i see the following error:

Perhaps iptables or your kernel needs to be upgraded.
iptables v1.8.8 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)

Vpn connection is established however I cannot browsing thebweb

To Reproduce
Steps to reproduce the behavior:

  1. Install fedora server 37
  2. docker run --name ipsec-vpn-server --env-file ~/env.txt --restart=always -v /home/$USER/Docker/config/ikev2-vpn/data:/etc/ipsec.d -v /home/$USER/Docker/config/ikev2-vpn/modules:/lib/modules:ro -p 500:500/udp -p 4500:4500/udp -d --privileged hwdsl2/ipsec-vpn-server
  3. docker logs ipsec-vpn-server
  4. Connect via strongSwan app using an Android phone
  5. Vpn connection is successful however web browsing is not working

Expected behavior
After vpn connection you can browse the web

Logs
iptables v1.8.8 (legacy): can't initialize iptables table filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.8 (legacy): can't initialize iptables table filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.8.8 (legacy): can't initialize iptables table filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.8 (legacy): can't initialize iptables table nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.8.8 (legacy): can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

Starting IPsec service...

================================================

IPsec VPN server is now ready for use!

Connect to your new VPN with these details:

Server (please complete the following information)

  • Docker host OS: fedora server 37
  • Hosting provider: on premasis
Originally created by @brego81 on GitHub (Dec 31, 2022). Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/338 **Describe the issue** When running the docker on fedora server 37 with default parameters i see the following error: Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.8 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Vpn connection is established however I cannot browsing thebweb **To Reproduce** Steps to reproduce the behavior: 1. Install fedora server 37 2. docker run --name ipsec-vpn-server --env-file ~/env.txt --restart=always -v /home/$USER/Docker/config/ikev2-vpn/data:/etc/ipsec.d -v /home/$USER/Docker/config/ikev2-vpn/modules:/lib/modules:ro -p 500:500/udp -p 4500:4500/udp -d --privileged hwdsl2/ipsec-vpn-server 3. docker logs ipsec-vpn-server 4. Connect via strongSwan app using an Android phone 5. Vpn connection is successful however web browsing is not working **Expected behavior** After vpn connection you can browse the web **Logs** iptables v1.8.8 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.8 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.8 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.8 (legacy): can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. iptables v1.8.8 (legacy): can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. Starting IPsec service... ================================================ IPsec VPN server is now ready for use! Connect to your new VPN with these details: **Server (please complete the following information)** - Docker host OS: fedora server 37 - Hosting provider: on premasis
kerem closed this issue 2026-03-02 08:01:17 +03:00
Author
Owner

@hwdsl2 commented on GitHub (Dec 31, 2022):

@brego81 Hello! Please try loading the iptables kernel module on your Docker host, then re-create the Docker container.

Command: sudo modprobe ip_tables

This is mentioned in advanced usage for some Linux distributions:
https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/docs/advanced-usage.md#run-without-privileged-mode

If you have further information feel free to continue to reply here.

<!-- gh-comment-id:1368276056 --> @hwdsl2 commented on GitHub (Dec 31, 2022): @brego81 Hello! Please try loading the iptables kernel module on your Docker host, then re-create the Docker container. Command: `sudo modprobe ip_tables` This is mentioned in advanced usage for some Linux distributions: https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/docs/advanced-usage.md#run-without-privileged-mode If you have further information feel free to continue to reply here.
Author
Owner

@hwdsl2 commented on GitHub (Dec 31, 2022):

@brego81 Alternatively, change the mount parameter in your "docker run" to:

-v /lib/modules:/lib/modules:ro

instead of the one in your command. Then re-create the Docker container. This will allow loading of the kernel module in the container.

<!-- gh-comment-id:1368276257 --> @hwdsl2 commented on GitHub (Dec 31, 2022): @brego81 Alternatively, change the mount parameter in your "docker run" to: -v /lib/modules:/lib/modules:ro instead of the one in your command. Then re-create the Docker container. This will allow loading of the kernel module in the container.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-ipsec-vpn-server#313
No description provided.