linux firewall

[sujeet_3]

hello ,
our setup is cluster setup, we r having cluster ip is 10.30.x.198.Now we installed linux firewall with two nic one is 10.30.x.195 and second is our local ip 172.168.x.10 and we natted 10.30.247.198 to 172.168.10.8 this ip bidirectionally now our server cluster ip is in 172.168.x.8.MQ series is running on server but when we checked MQ Websphere queue channel it shows transmit channel running but receive channel inactive means from remotely our server is not accesible they accessing messaging port 1419 for reciving and transmiting.
please help me out how i will configure linux firewall?
pl tell me

[Stuart Browne]

This sounds awfully like this thread:

http://forums2.itrc.hp.com/service/forums/questionanswer.do?threadId=938891

What's the current FORWARD chain policy set like?

[sujeet_3]

i have tried that solutions but still my mqseries receiving channel is not getting online. as per your suggestion can all port will be opened because i required 1419 port to be opened bidirectionally


pl help me out

[Stuart Browne]

Well, if you only need those two, first check to see if the FORWARD chain is blocking them, and it is, then allow them through.

If it's a DROP policy FORWARD chain, then either a policy change (depending on the environment) or specific rules to allow them through the interfaces will be required. i.e., for 1419:

iptables -I FORWARD 1 -j ACCEPT -p tcp --dport 1419
iptables -I FORWARD 2 -j ACCEPT -p tcp --sport 1419

roughly.. There are better ways, but it depends on your firewall policy, and whether you want stateful or stateless firewall's.