Those 2 rules are offending: # Accept established iptables -A INPUT --match state --state ESTABLISHED,RELATED -j ACCEPT # block 127.0.0.1 on eth0 iptables -A INPUT --match state --state NEW -i eth0 -s 127.0.0.1 -j DROP The error message is the following: iptables: No chain/target/match by that name iptables: No chain/target/match by that name