LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-22-2009, 04:03 PM   #1
Sum1
Member
 
Registered: Jul 2007
Distribution: Fedora, CentOS, and would like to get back to Gentoo
Posts: 332

Rep: Reputation: 30
No-ip DNS Updater + iptables rules.


I opened port 8245 for both inbound/outbound and tcp/udp traffic, but the noip2 updater continues to fail:

Sep 22 16:49:18 noip2[9326]: Can't gethostbyname for dynupdate.no-ip.com
Sep 22 16:49:18 noip2[9326]: Can't get our visible IP address from ip1.dynupdate.no-ip.com

My iptables rules to allow traffic on port 8245 (on eth0 internet interface) follow:

iptables -t filter -A INPUT -i eth0 -p tcp -m state --state NEW --dport 8245 -j ACCEPT
iptables -t filter -A INPUT -i eth0 -p udp --dport 8245 -j ACCEPT

iptables -t filter -A OUTPUT -o eth0 -p tcp -m state --state NEW --dport 8245 -j ACCEPT
iptables -t filter -A OUTPUT -o eth0 -p udp --dport 8245 -j ACCEPT

I asked no-ip support whether I had to allow ping requests on that interface and port, but they didn't mention anything about it in the response. They did confirm that the default port for the dns updater is 8245.

Thanks for your help.
 
Old 09-23-2009, 09:15 AM   #2
zhjim
Senior Member
 
Registered: Oct 2004
Distribution: Debian Squeeze x86_64
Posts: 1,748
Blog Entries: 11

Rep: Reputation: 233Reputation: 233Reputation: 233
Quote:
Originally Posted by Sum1 View Post
Sep 22 16:49:18 noip2[9326]: Can't gethostbyname for dynupdate.no-ip.com
Sep 22 16:49:18 noip2[9326]: Can't get our visible IP address from ip1.dynupdate.no-ip.com
The first line sas that the hostname can't be resolved to an ip. do a
dig dynupdate.no-ip.com
or
host dynupdate.no-ip.com
Seems like an DNS issue.

Quote:
Originally Posted by Sum1 View Post
My iptables rules to allow traffic on port 8245 (on eth0 internet interface) follow:
Dunno what the ports are good for but is this the machine connected to the WWW you have this iptables rules? If not you would need to set up some forwarding rules.
 
Old 09-23-2009, 04:02 PM   #3
Sum1
Member
 
Registered: Jul 2007
Distribution: Fedora, CentOS, and would like to get back to Gentoo
Posts: 332

Original Poster
Rep: Reputation: 30
Thanks Zhjim,

From the excellent prompting received from your response in my other networking thread, I figured it out.

Due to my DROP policies, the following was necessary:

iptables -t filter -A OUTPUT -o eth0 -p tcp --dport 8245 -j ACCEPT

Works. :-)

Thank you very much for your time.
 
Old 09-24-2009, 02:13 AM   #4
zhjim
Senior Member
 
Registered: Oct 2004
Distribution: Debian Squeeze x86_64
Posts: 1,748
Blog Entries: 11

Rep: Reputation: 233Reputation: 233Reputation: 233
Quote:
Originally Posted by Sum1 View Post
From the excellent prompting received from your response in my other networking thread, I figured it out.
Cool did not even realize that I posted in two of your threads.
Good to see if solved and working.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Why my iptables rules from Shorewall is using DNS instead of IP? cviniciusm Linux - Newbie 3 07-06-2009 08:59 PM
iptables 1.27a still loading rules after installing iptables 1.3.0 yawe_frek Linux - Software 1 06-07-2007 09:50 PM
IPTABLES - rules in /etc/sysconfig/iptables The_JinJ Linux - Newbie 6 11-20-2004 01:40 AM
Dynamic DNS Updater for Linux dalibork Linux - Networking 3 08-24-2004 10:01 AM
iptables rules puding Linux - Networking 2 08-09-2004 10:46 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 08:16 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration