Page 1 of 1

Firewall not updated to allow UDP traffic to 5544

Posted: Mon Jun 26, 2017 12:43 pm
by eloyd
By default, a new install of NLS adds port 5544 to /etc/sysconfig/iptables using TCP transport. Yet documentation says that the "default syslog has a type conversion 'syslog.' This is going to label any logs coming in from UDP or TCP on port 5544 as syslog..."

Note that UDP traffic is dropped in iptables with the default configuration, so this statement is inaccurate.

NLS does bind to UDP port 5544 so if you open up the firewall to allow UDP traffic on port 5544, it will work as intended.

I consider this a bug and should be fixed, or else it's not a bug and documentation should be updated.

Re: Firewall not updated to allow UDP traffic to 5544

Posted: Mon Jun 26, 2017 2:17 pm
by cdienger
What OS is this on? Is this a 1.4.4 install? I just tested a fresh install on CentOS 6.8 and iptables had a line to open udp port 5544.

Re: Firewall not updated to allow UDP traffic to 5544

Posted: Mon Jun 26, 2017 2:24 pm
by eloyd
Likely this was from an OVA install from 2 years ago that's been updated to 1.4.4 in the interim.

If it's working from source install, that's great, but the OVA might need to be updated as well.

Re: Firewall not updated to allow UDP traffic to 5544

Posted: Mon Jun 26, 2017 3:10 pm
by dwhitfield
The new OVA already has this fixed. This *was* a bug that has been fixed (although I don't know that it ever made it into the official internal bug tracker).

Ok, to go ahead and lock this one up?

Re: Firewall not updated to allow UDP traffic to 5544

Posted: Mon Jun 26, 2017 3:14 pm
by eloyd
Yup yup. Thanks!