root@tinkerboard:~# /usr/share/ufw/check-requirements Has python: pass (binary: python2.7, version: 2.7.12, py2) Has iptables: pass Has ip6tables: pass Has /proc/net/dev: pass Has /proc/net/if_inet6: pass This script will now attempt to create various rules using the iptables and ip6tables commands. This may result in module autoloading (eg, for IPv6). Proceed with checks (Y/n)? Y == IPv4 == Creating 'ufw-check-requirements'... done Inserting RETURN at top of 'ufw-check-requirements'... done TCP: pass UDP: pass destination port: pass source port: pass ACCEPT: pass DROP: pass REJECT: pass LOG: FAIL error was: iptables: No chain/target/match by that name. hashlimit: FAIL error was: iptables: No chain/target/match by that name. limit: FAIL error was: iptables: No chain/target/match by that name. ctstate (NEW): pass ctstate (RELATED): pass ctstate (ESTABLISHED): pass ctstate (INVALID): pass ctstate (new, recent set): FAIL (no runtime support) error was: iptables: No chain/target/match by that name. ctstate (new, recent update): FAIL (no runtime support) error was: iptables: No chain/target/match by that name. ctstate (new, limit): FAIL error was: iptables: No chain/target/match by that name. interface (input): pass interface (output): pass multiport: FAIL error was: iptables: No chain/target/match by that name. comment: FAIL error was: iptables: No chain/target/match by that name. addrtype (LOCAL): pass addrtype (MULTICAST): pass addrtype (BROADCAST): pass icmp (destination-unreachable): pass icmp (source-quench): pass icmp (time-exceeded): pass icmp (parameter-problem): pass icmp (echo-request): pass == IPv6 == Creating 'ufw-check-requirements6'... done Inserting RETURN at top of 'ufw-check-requirements6'... done TCP: pass UDP: pass destination port: pass source port: pass ACCEPT: pass DROP: pass REJECT: pass LOG: FAIL error was: ip6tables: No chain/target/match by that name. hashlimit: FAIL error was: ip6tables: No chain/target/match by that name. limit: FAIL error was: ip6tables: No chain/target/match by that name. ctstate (NEW): pass ctstate (RELATED): pass ctstate (ESTABLISHED): pass ctstate (INVALID): pass ctstate (new, recent set): FAIL (no runtime support) error was: ip6tables: No chain/target/match by that name. ctstate (new, recent update): FAIL (no runtime support) error was: ip6tables: No chain/target/match by that name. ctstate (new, limit): FAIL error was: ip6tables: No chain/target/match by that name. interface (input): pass interface (output): pass multiport: FAIL error was: ip6tables: No chain/target/match by that name. comment: FAIL error was: ip6tables: No chain/target/match by that name. icmpv6 (destination-unreachable): pass icmpv6 (packet-too-big): pass icmpv6 (time-exceeded): pass icmpv6 (parameter-problem): pass icmpv6 (echo-request): pass icmpv6 with hl (neighbor-solicitation): FAIL error was: ip6tables: No chain/target/match by that name. icmpv6 with hl (neighbor-advertisement): FAIL error was: ip6tables: No chain/target/match by that name. icmpv6 with hl (router-solicitation): FAIL error was: ip6tables: No chain/target/match by that name. icmpv6 with hl (router-advertisement): FAIL error was: ip6tables: No chain/target/match by that name. ipv6 rt: FAIL error was: ip6tables: No chain/target/match by that name. FAIL: check your kernel and that you have iptables >= 1.4.0 FAIL: check your kernel and iptables for additional runtime support