SYSTEM INFORMATION OS type and version Rocky Linux 10.1 Webmin version 2.640 WARNING! Your current IPtables configuration is invalid : iptables-restore v1.8.11 (nf_tables): unknown option “–state” Apparently in newer versions of iptables (specifically version 1.8.4 and later), the -…

Use the nftables module. I’m not sure if the nftables module has made it into Webmin proper yet, but I think I saw it get merged, so if it’s not, it’ll be in the next Webmin release. We won’t be updating iptables module, as iptables is considered deprecated upstream. The nftables module is very si…

[image] Joe: I’m not sure if the nftables module has made it into Webmin proper yet, but I think I saw it get merged, so if it’s not, it’ll be in the next Webmin release. Yes, it’s included in Webmin 2.640 and works well. If you don’t see it on the menu, when installing Webmin from the Virtu…

No package webmin-nftables was found but apparently nftables is and was already installed: Now installing webmin-nftables .. Installing package(s) with command /bin/dnf -y install webmin-nftables .. Last metadata expiration check: 0:01:29 ago on Sun May 10 18:14:10 2026. No match for argument: …

It means you have the full Webmin package installed, and a new nftables Linux Firewall module is already included in the Webmin 2.640 release.

If so, why do I get the error message: … unknown option “–state” I just just editing a rule that was already there to change a port number.

[image] richard47: If so, why do I get the error message: … unknown option “–state” I just just editing a rule that was already there to change a port number. I’m not sure what you mean. Can you clarify your question?

Didn’t you say you’re using iptables and the iptables Webmin module? That’s not the same module as the nftables module. Nftables is the new (well, it’s a decade or more old) firewall management tool for Linux. It is similar to iptables, but it is not iptables (though I think iptables now interacts …

[image] Joe: (though I think iptables now interacts with nf_tables at the kernel level). This gave me a headache when I restarted server work a few years back. :frowning: XTABLES-NFT(8) System Manager's Manual …

nftables is better in every way, so it’s not a big loss to simply not use iptables. Now that pretty much everything supports it, there’s no good arguments to keep using iptables. nftables has a couple of new concepts, but is actually easier to use, I think. The history of Linux firewalls goes ipfi…

I have been using iptables for years and years and Webmin always made that easy. I spun up a new Rocky 9 server and webmin and iptables worked as I expected, no problems. Now on a different server with Rocky 10, I suddenly get that error message about "… unknown option “–state”. So when told th…

IPTables on Rocky 10

Webmin

Ilia May 10, 2026, 6:33pm 7

I’m not sure what you mean. Can you clarify your question?