Re: Port forwrading help?

[Ken Sims <mdrg6315@xxxxxxxxxxx>]

Hi David -

At 14:11 12/26/2006, David Gibbs wrote:
> Ken Sims wrote:
> > You're going to need INPUT and OUTPUT rules with -j ACCEPT to allow port
> > 5222 as a destination port and source port respectively.
>
> Explicitly?
>
> My default rule is ACCEPT anyways (I firewall at the router).

Not explicitly if they will get ACCEPTed by default, however you could put 
explicit rules at the tops of the chains and see if that makes a 
difference.  If it does, then something already in the chain is blocking them.

> > If you're still having problems, I recommend adding logging rules 
> temporarily.
>
> Bleh, I hate firewall logging.

No argument from me on "Bleh", but sometimes it's the best/only way to 
figure out what's going on.

If you're testing from a specific PC, you can put in logging rules just for 
that PC's IP address.  Otherwise just for destination port 5222 and source 
port 5222.

Ken