[jadmin] iptables and Jabber

[Norman Rasmussen]

On 3/12/07, Markus Meyer <markus.meyer at koeln.de> wrote:
> The server works fine without the bloody firewall but as soon as I
> switch it on the connection to other servers fails. Now what I'm
> wondering about is that the remote server is not using port 5269. But I
> guess that the remote server tells my server to use a different port.
> But this should be catched by the stateful filtering.
> So any help would be much appreciated.

Can you ask it to allow the jabberd process full access to the
internet? (match on process name, or uid - use -m owner --uid-owner,
or --cmd-owner).

The alternative would be to write a stateful filter that detects DNS
SRV responses, and treats them as expected connections.

-- 
- Norman Rasmussen
 - Email: norman at rasmussen.co.za
 - Home page: http://norman.rasmussen.co.za/