Re: [HTCondor-users] Issues with firewall when USE_SHARED_PORT = True

[Todd L Miller <tlmiller@xxxxxxxxxxx>]

> sudo netstat -tlp
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
> tcp        0      0 0.0.0.0:9618            0.0.0.0:*               LISTEN      2190/condor_shared_
> tcp        0      0 0.0.0.0:54011           0.0.0.0:*               LISTEN      2190/condor_shared_

> SharedPortLog attached

	The only time the shared port daemon needs to contact another 
daemon on the same machine on its own behalf is to tell the condor_master 
daemon that it's alive.  Normally, the shared port daemon would accept a 
connection on the shared port and then pass it along to the target daemon, 
but when it's acting on its own behalf, there isn't an existing 
connection... so it makes one.  For various reasons, it does so by 
connecting to itself at, in your case, 192.168.1.8, /not/ 127.0.0.1. 
Your firewall needs allow connections from itself to itself on any port, 
and if I'm reading the rules right, it doesn't.  You may be able to use 
the IN_LOWPORT and IN_HIGHPORT macros to define a range; you may need to 
make sure the range includes port 9618.

	Sorry for all the trouble.

- ToddM