Koozali.org: home of the SME Server

IP Tables Help, Device not able to communicate to server

Offline ramasule

  • *
  • 78
  • +0/-0
Re: IP Tables Help, Device not able to communicate to server
« Reply #15 on: April 30, 2016, 05:08:39 PM »
Sorry for all the questions,

RequestedDeletion how do I remove rules or view them after I set them?

config set WaterTimer service status enabled access public UDPPort 67

I used iptables -L but do not see that service in it,

I'm removing OpenVPN right now.


guest22

Re: IP Tables Help, Device not able to communicate to server
« Reply #16 on: April 30, 2016, 05:10:20 PM »
RequestedDeletion how do I remove rules or view them after I set them?

config set WaterTimer service status enabled access public UDPPort 67


config delete WaterTimer
signal-event remoteaccess-update


Quote
I used iptables -L but do not see that service in it,


You should be able to see port 67 being 'open'

Offline ReetP

  • *
  • 3,940
  • +6/-0
Re: IP Tables Help, Device not able to communicate to server
« Reply #17 on: April 30, 2016, 11:59:04 PM »
As a note... you shouldn't set iptables rules manually.

Using Charlies suggestion anything configured as a 'service' with a port and the service set to public will have that port automagically opened by SME. The masq templare picks up any ports and creates the relevant iptables rules for you. Saves lots of manual fiddling !
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: IP Tables Help, Device not able to communicate to server
« Reply #18 on: May 01, 2016, 04:19:19 AM »
Remove the openVPN contrib and revert back to plain SME server configuration. If the problem goes away, then work with the openVPN contrib developer to fix the problem with DHCP broadcasts.

The bridge device br0 appears to be relaying DHCP broadcasts, which is being blocked by iptables. SME server base had no need to relay those broadcasts, and has no reason to include iptables rules to allow the broadcasts to be relayed.