The default configuration file (/etc/knockd.conf) for the net-misc/knock-0.3 package contains an invalid path to iptables: /usr/sbin/iptables The correct path on a Gentoo system is: /sbin/iptables This means that the upstream configuration file should be replaced and/or patched. Reproducible: Always Steps to Reproduce: Problem is shown when running knockd and sending the correct port knock sequence. Actual Results: [08/03/04 15:24] opencloseSSH: running command: /usr/sbin/iptables -A INPUT -s 1.2.3.4 -p tcp --dport 22 -j ACCEPT [08/03/04 15:24] opencloseSSH: command returned non-zero status code (127) Expected Results: [08/03/04 15:57] opencloseSSH: running command: /sbin/iptables -A INPUT -s 1.2.3.4 -p tcp --dport 22 -j ACCEPT The emerge info shouldn't be relevant in this case, but here we go: Portage 2.0.50-r9 (default-x86-2004.2, gcc-3.3.3, glibc-2.3.3.20040420-r0, 2.6.7-gentoo-r11) ================================================================= System uname: 2.6.7-gentoo-r11 i686 Mobile Intel(R) Celeron(R) CPU 2.50GHz Gentoo Base System version 1.4.16 Autoconf: sys-devel/autoconf-2.59-r4 Automake: sys-devel/automake-1.8.3 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CFLAGS="-march=pentium4 -O2 -fomit-frame-pointer -fstack-protector -pipe" CHOST="i686-pc-linux-gnu" COMPILER="gcc3" CONFIG_PROTECT="/etc /etc/tomcat /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/mozilla/defaults/pref /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=pentium4 -O2 -fomit-frame-pointer -fstack-protector -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoaddcvs ccache sandbox" GENTOO_MIRRORS="http://mirror.gentoo.se http://gentoo.oregonstate.edu" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="X Xaw3d acpi alsa apache2 apm avi berkdb bonobo cdr crypt cups divx4linux doc dvd encode esd faad flac foomaticdb gcj gdbm gif gnome gpm gstreamer gtk gtk2 gtkhtml guile imlib java jce jpeg libg++ libwww mad mbox mikmod mmx mng motif mozilla moznocompose moznoirc moznomail mpeg mysql ncurses nls nptl oggvorbis opengl openssh pam pdflib pic png pnp python quicktime readline sdl slang spell sse ssl svga tcpd theora threads tiff truetype unicode wmf x86 xine xml xml2 xmms xv xvid zlib"
Fixed in cvs.