Community discussions

MikroTik App
 
sankofa411
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 82
Joined: Wed Feb 16, 2005 11:42 pm
Contact:

Pleaseeeee Help

Fri Aug 12, 2005 6:12 pm

hello MT gurus

I have a server running redhat 9 with a 3rd party software running on it. When I run the 3rd party software locally on the server it works fine. There is a setup for a remote pc or client pc to access the software on the server. When I run the program on the client pc or the remote pc I get a error message about "can not communite with server". The server have all firewall on redhat disabled. I can ping and SSH into the server fine. The server and client are all on the same network.

The documentation for the 3rd party software requires these ports to be open

1098- (JBoss RMI port) 1099-(JBoss RMI port)
4444- (JBoss RMI Object port) 3306- (MySQL DB port)

I opened the ports by implimenting these firewall rules. and moved the rules to the top.

add chain=forward dst-port=1098-1099 protocol=tcp action=accept
add chain=forward dst-port=4444 protocol=tcp action=accept
add chain=forward dst-port=3306 protocol=tcp action=accept

unfortunately I still get the error message and can not communicate with the server. Please if anyone can help I will really appreciate it.

Thank you in advance
Ben
 
rikerconsulting
just joined
Posts: 21
Joined: Sat Apr 30, 2005 12:11 am
Contact:

Fri Aug 12, 2005 8:07 pm

Is it possible you need to open the ports up for the src-port as well? The server may be sending reponses from those ports and getting blocked.

~ Jason
 
jarosoup
Long time Member
Long time Member
Posts: 596
Joined: Sun Aug 22, 2004 9:02 am

Fri Aug 12, 2005 10:33 pm

If you've got a Mikrotik Router between your connection and the RedHat server and the router is running NAT, then you need a destination NAT rule (dst-nat in the firewall) for each port specifying the destination port and action=nat with the rule "nat to" and the port to send it to.
 
sankofa411
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 82
Joined: Wed Feb 16, 2005 11:42 pm
Contact:

Fri Aug 12, 2005 11:11 pm

Thank you Jason and Riker I will try both ways and see. I really appreate your help.

Thank you