Iptables is blocking MS-SQL DB

sandeepc04 · 07-10-2012, 04:11 AM

Hi friends,

I have RHEL-5 with IPTABLES, and in widows 2003 having Enterprises Manager (SQL-2000) installed, In this some local DB Connected and some remotely/Public DB connected, When i on iptables service it is blocking remotely/public IP DB but local DB are opening, no issue with local connected DB but the problem is getting only with connected to public IP DB. I have opened below SQL ports Even its not working

# vi iptables
-A RH-Firewall-1-INPUT -p tcp --dport 118 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 156 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 1433 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 1434 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 1533 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 3306 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 5432 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 6432 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 19812 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 25565 -j ACCEPT

Thanks and Regards.
Sandeep CC

lithos · 07-10-2012, 04:59 AM

Hi,

you probably need to allow "OUTPUT" ports for MSSql 1433 & 1434, not just INPUT.

sandeepc04 · 07-10-2012, 06:09 AM

lithos,

Thanks for your reply, I am very week in iptables, can you give me, suitable OUTPUT command for my iptables?

NOTE:

I am editing direct iptables file in /etc/sysconfig/iptables

Regards,
Sandeep CC

lithos · 07-10-2012, 11:38 AM

well, I will give you first some IPTABLES examples

Then in your case it should be something like:

Code:

# Allow full outgoing connection but no incomming stuff
-A OUTPUT -o eth0 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT         <--- if your network interface is not eth0 , change accordingly
-A OUTPUT -p tcp --sport 1024:65535 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

this should/will allow ALL outgoing traffic from your server!