Add a rule to accept the multicast traffic on the listening server with the port multicasting too. Some firewalls block listening multicast traffic.
-d 239.2.11.71 -dport 8649 On Wed, 2005-09-21 at 12:24, Peter Huskey wrote: > Hi > > I have installed gmetad/gmond on my network primarily using the > defaults described in the README, including using the mcast > 239.2.11.71/8649 setting. I currently use guarddog to configure my > iptables; within the program I opened ports 8649,8651 and 8652. With > the firewall activated I can telnet to these ports from localhost and > other nodes and none appear closes (8649 prints the metric info, 8651 > prints the XML page). Nmap on these ports confirm that I am not > imagining anything. However, if I run ‘gstat –a’ or look at the XML > output, the nodes, even the one running gmetad appear to be down. If > I shutdown iptables (service iptables stop), then after a few seconds > qstat and the webpage show everything working correctly. I ran > tcpdump for both cases (sans_firewall: firewall off, avec_firewall: > firewall on) and I don’t see anything overly different between the > packets received at :8649 except for the id number [10.1.1.2 is my > server running both gmetad and gmond]: > > > > avec_firewall:09:59:40.978538 10.1.1.2.2334 > 239.2.11.71.8649: [udp > sum ok] udp 8 (DF) [ttl 1] (id 65249, len 36) > > avec_firewall:09:59:53.229866 10.1.1.2.2334 > 239.2.11.71.8649: [udp > sum ok] udp 8 (DF) [ttl 1] (id 65250, len 36) > > avec_firewall:10:00:13.242172 10.1.1.2.2334 > 239.2.11.71.8649: [udp > sum ok] udp 8 (DF) [ttl 1] (id 65251, len 36) > > sans_firewall:10:45:14.842308 10.1.1.2.2334 > 239.2.11.71.8649: [udp > sum ok] udp 8 (DF) [ttl 1] (id 502, len 36) > > sans_firewall:10:45:34.854596 10.1.1.2.2334 > 239.2.11.71.8649: [udp > sum ok] udp 8 (DF) [ttl 1] (id 503, len 36) > > > > Are there any other ports to which I should be paying attention or > something else which would explain the strange behavior? I can > provide add’l config info if needed. > > > > Thanks! > > pete > > > > > >
signature.asc
Description: This is a digitally signed message part
