From mboxrd@z Thu Jan 1 00:00:00 1970 From: Luca Ferrari Subject: iptables & vypress Date: Thu, 14 Jul 2005 18:47:08 +0200 Message-ID: <42D6970C.7040800@infinito.it> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: Sender: linux-admin-owner@vger.kernel.org List-Id: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: linux-admin@vger.kernel.org Hi, I've got two networks, 192.168.1.0 and 192.168.4.0, that are connected thru an ADSL and a couple of firewalls (with iptables). Now I've got some problems with the Vypress Messenger, a chat program that communicates using the 7777 port. The problem is that outgoing traffic from 192.168.4.0 is permitted, while incoming not, thus 192.168.4.0 can send messages to the other network, but the 192.168.1.0 cannot. The following is an excerpt of the iptables configuration for the network 192.168.1.0 on the 192.168.4.0 firewall: [root@firewall script]# iptables-save | grep 192.168.1 -A INPUT -s 192.168.4.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -p tcp -j ACCEPT -A INPUT -s 192.168.4.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -p udp -j ACCEPT -A FORWARD -s 192.168.4.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -p tcp -j ACCEPT -A FORWARD -s 192.168.4.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -p udp -j ACCEPT -A OUTPUT -d 192.168.1.0/255.255.255.0 -o eth1 -p udp -j ACCEPT I cannot see what's wrong here, since all the traffic among 192.168.1.0 and 192.168.4.0 is permitted. I'm pretty sure the problem is in the iptables of 192.168.4.0 network cause if I cannot directly (i.e., bypassing the iptable firewall) vypress works. Any suggestion? Thanks, Luca -- Luca Ferrari fluca1978@infinito.it