I've got netatalk running as an AFP server so I can make Time Machine backups on my LAN. It works perfectly as long as iptables accepts all incoming traffic on the LAN, but I'm trying to tighten up security on the server, so I set the default iptables input policy to REJECT, and now I need to open up the ports needed for Time Machine. I'm using [ferm][1]
to configure iptables.
I added the following rule in ferm.conf
:
proto tcp saddr $LAN_SUBNET dport afpovertcp ACCEPT;
which generates this iptable rule:
-A INPUT --protocol tcp --source 192.168.42.0/24 --dport afpovertcp --jump ACCEPT
but the Time Machine server still isn't showing up when I browse Network in Finder.
What other ports need to be open to traffic on the LAN?