RPC and firewall (iptable)

ayachi · 05-13-2004, 07:53 AM

Hi all
I have a client server program that use remote procedure call to communicate

if the iptable is stoped the two programs run well

if restarted iptable the client can't communicate

I start the server to get the port number but I found that's it's not unique it change

I know that the server register to portmap to get a free port number

How to configure firewall (iptable) to let commnunication done ?

thank's lot

bulliver · 05-13-2004, 03:44 PM

If the computers are on an internal network you can allow them access based on interface ie: eth1 using the -i flag ie:

Code:

iptables -A INPUT -i eth1 -j ALLOW

If you must connect over the internet, then you can allow based on source address ie: computers that you want to allow to connect:

Code:

iptables -A INPUT -p tcp -s 192.168.5.2 -j ALLOW

If you want to allow anyone to connect, you can allow a range of ports (that your service run under) ie:

Code:

iptables -A INPUT -p tcp --dport 1024:1124 -j ALLOW

This will allow all conections to ports 1024-1124. This is not very secure however. Try to discover what range of ports your server is running on, better yet, try to bind it to a single port....