I am running FC6 and using iptables as my firewall for my internal LAN. I installed Openfire to use as an IM application. I have no problems with the internal machines connecting and chatting with each other. However, no one from the outside can connect.

I have tried to use Pandian and Pidgin as the external clients. I have opened the firewall up so it passes all traffic from the one person I have been testing with. If I tail the iptables.log, I see the connection attempt come up on port 5222. However, they are not able to connect.

This is what I see in the firewall log:
Dec 22 13:49:43 Fedora6 kernel: IN=eth0 OUT= MAC=00:0d:88:3b:be:17:00:30:b8:c7:2b:00:08:00 SRC=71.xx.xx.x DST=68.230.xx.xx LEN=48 TOS=0x00 PREC=0x00 TTL=104 ID=41198 DF PROTO=TCP SPT=63530 DPT=5222 WINDOW=65535 RES=0x00 SYN URGP=0

SRC=71.xx.xx.x is the person trying to connect from outside my firewall. DST=68.230.xx.xx is the IP address of my ethernet card facing the internet. The Openfire documentation says it binds to all interfaces by default. I even went into the .conf file and put in the LAN interface and the internet interface to see if that would help. No luck.

I believe the firewall is probably blocking the connection but I can't figure out why. Any help or suggestions would be appreciated.

Well, I don't know whether you may have answered this yourself, but you just might want to check that the client is connecting without encryption, or forward 5223 for secure messaging.

Do you maybe also have logs from the client side, to debug a little further?


regards

PelliX