Jive Messenger 2.2.2 and Firewall

Openfire Openfire Support
1

Hi,

I setup Jive Messenger 2.2.2 in my Linux box, which address is 192.168.0.2/255.255.255.0. And the database(Oracle, the port is 1521) used by Jive Messenger is installed on another machine, which 192.168.0.3/255.255.255.0. The Jive Messenger client(Gush) is installed on 192.168.0.4/255.255.255.0.

192.168.0.2/255.255.255.0(Jive Messenger Sever hosted on) has some firewall rules, which permit it can access any machine in the same network, but only the other machine can access it except on some specified port such as 80. Both 192.168.0.3/255.255.255.0(the database machine) and 192.168.0.4/255.255.255.0(jive messenger client ) have no any firewall rules.

When I used the following to disable the firewall on 192.168.0.2/255.255.255.0(Jive Messenger Server hosted on), everything is OK.:

iptables -F /b

However, if I use the firewall rules like this:

iptables -A INPUT -p tcp --dport 5222 -j ACCEPT[/b]

iptables -A INPUT -p tcp --dport 5223 -j ACCEPT[/b]

iptables -A INPUT -p tcp --dport 5269 -j ACCEPT[/b]

iptables -A INPUT -p tcp --dport 10015 -j ACCEPT[/b]

My jabber client(Gush, on 192.168.0.4/255.255.255.0) cannot connection the Jive Messenger Server(on 192.168.0.2/255.255.255.0) then.

I think the reason is Jive Messenger Server cannot access the database oracle on 192.168.0.3/255.255.255.0 when I use the firewall rules on Jive Messenger Server.

How should I modify my firewall rules?

Thanks.

2

Well, by default iptables should let any outgoing connection. As you didnt specify specific chain iptables -F[/b] must have deleted all rules in all chains. Try adding this:

iptables -P OUTPUT ACCEPT

This will accept all outgoing connections. I think database is not trying to make a connection to a server, do it?