There was a rule above this 5432 blocking connections. Somehow I
missed it and noticed it only after posting this message. Fixed and
it's working now.
--
Thanks,
CS
On Tue, Aug 31, 2010 at 8:09 PM, Carlos S <neubyr at gmail.com>
wrote:> Hi,
>
> I am having problem in configuring iptables for PostgreSQL server. I
> added following rule to iptables to allow connections to default
> PostgreSQL port (5432):
> {{{
> sudo /sbin/iptables -A RH-Firewall-1-INPUT -m state --state NEW -m tcp
> -p tcp -s 10.0.0.0/24 --dport 5432 -j ACCEPT
> }}}
>
> After this I can't connect using telnet or psql (postgres client).
> Following error is received from telnet on MacOS and CentOS:
> {{{
> MacOS$ ?telnet 10.0.0.12 5432
> Trying 10.0.0.12?
> telnet: connect to address 10.0.0.12: Connection refused
> telnet: Unable to connect to remote host
> }}}
>
> {{{
> CentOS$ telnet 10.0.0.12 5432
> Trying 10.0.0.12...
> telnet: connect to address 10.0.0.12: No route to host
> }}}
>
> I tried removing source address constraint and to allow connections
> from all hosts, however that didn't make any difference.
>
> * The connection works fine when I stop iptables firewall.
>
> I am sure there is no rule before this 5432 rule which is refusing
> connections. The PostgreSQL server is running and accepting localhost
> connections. Also, hosts.allow and hosts.deny file are not refusing
> connections. Any help on what might be wrong?
>
> --
> Thanks,
> CS
>