iptables and daap help

itchanddino · n00b Joined: 24 Aug 2007 Posts: 19

Hello, first off I've read these posts:
https://forums.gentoo.org/viewtopic-t-391436-highlight-daap+iptables.html
https://forums.gentoo.org/viewtopic-t-289401-highlight-daap+iptables.html
They didn't help

My current iptables rules are (straight from the wiki):

-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-port-unreachable

What would I have to add in order to get daap support to browse the shared itunes directories on my campus' network? When I disable iptables I can access them with no problem, so I'm sure this is where I'm stuck. Thanks!

itchanddino · n00b Joined: 24 Aug 2007 Posts: 19

I've been fooling around with settings all day, but no shares are showing up

Any help is appreciated!

Hu · Administrator Joined: 06 Mar 2007 Posts: 23064

You need to add a rule which will ACCEPT traffic used by the port(s) that daap uses. Assuming that daap refers to the Digital Audio Access Protocol mentioned in /etc/services, this means you need to ACCEPT traffic for port 3689. Rules are processed in order until one matches, so your new rule must be placed before the REJECT rule.

Dagger · Retired Dev Joined: 11 Jun 2003 Posts: 765 Location: UK

1) If you want to access to your campus network FROM your PC you need to allow your firewall to let OUTPUT packets go through.
2) If you want to access to your PC FROM campus network you need to allow your firewall to allow INPUT packets.

Please post your IPTALBLES -L
_________________
95% of all computer errors occur between chair and keyboard (TM)
Join the FSF as an Associate Member!
Post under CC license.