We're using ipchains instead of iptables, but here's the config if it helps
(mhp-aquaman and mhp-topaz are the NetWorker servers)...

# Legato Networker Rules
#
# mhp-aquaman
-A input -s mhp-aquaman 111 -d 0/0 -p tcp -y -i eth0 -j ACCEPT
-A input -s mhp-aquaman 111 -d 0/0 -p udp -i eth0 -j ACCEPT
-A input -s mhp-aquaman 7937 -d 0/0 -p tcp -y -i eth0 -j ACCEPT
-A input -s mhp-aquaman 7937:7938 -d 0/0 -p udp -i eth0 -j ACCEPT
-A input -s mhp-aquaman 10001:30000 -d 0/0 -p tcp -y -i eth0 -j ACCEPT
-A input -s mhp-aquaman 10001:30000 -d 0/0 -p udp -i eth0 -j ACCEPT
# mhp-topaz
-A input -s mhp-topaz 111 -d 0/0 -p tcp -y -i eth0 -j ACCEPT
-A input -s mhp-topaz 111 -d 0/0 -p udp -i eth0 -j ACCEPT
-A input -s mhp-topaz 7937 -d 0/0 -p tcp -y -i eth0 -j ACCEPT
-A input -s mhp-topaz 7937:7938 -d 0/0 -p udp -i eth0 -j ACCEPT
-A input -s mhp-topaz 10001:30000 -d 0/0 -p tcp -y -i eth0 -j ACCEPT
-A input -s mhp-topaz 10001:30000 -d 0/0 -p udp -i eth0 -j ACCEPT
#

-----Original Message-----
From: Mark Ortmeyer [mailto:morto AT APL.WASHINGTON DOT EDU]
Sent: Wednesday, June 16, 2004 1:30 PM
To: NETWORKER AT LISTMAIL.TEMPLE DOT EDU
Subject: [Networker] using Networker through IPtables


Hi,
We are having some difficulty writing viable IPtables rules, which allow a
successful backup from client to
server using Networker.

client --> using IPtables
server --> not behind firewall

Has anyone written an IPtables rule for their Networker configuration, that
they would be willing to share?
It would be greatly appreciated.

thanks,
-mark



--
Mark Ortmeyer                       morto AT apl.washington DOT edu
University of Washington            http://www.washington.edu
Applied Physics Laboratory          http://www.apl.washington.edu
Polar Science Center                http://psc.apl.washington.edu
(206) 543-1349                      (206) 616-3142 (fax)

--
Note: To sign off this list, send a "signoff networker" command via email
to listserv AT listmail.temple DOT edu or visit the list's Web site at
http://listmail.temple.edu/archives/networker.html where you can
also view and post messages to the list.
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=

--
Note: To sign off this list, send a "signoff networker" command via email
to listserv AT listmail.temple DOT edu or visit the list's Web site at
http://listmail.temple.edu/archives/networker.html where you can
also view and post messages to the list.
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=