mqtt-users team mailing list archive

["Brian O'Donovan" <bodonovan@xxxxxxxxx>]

I am not familiar with the distribution policy with regard to adjusting
iptables rules, but I agree you would need to be consistent with them.

>Not as surprised as I am! :) There's no way mosquitto should be
>opening any UDP ports and I don't see any evidence of it on the
>instances I have running at the moment either. Can I ask how you came
>to that conclusion?
I came to this conclusion by placing a wireshark trace on traffic between
the two nodes while exchanging MQTT messages. I confirmed this conclusion by
seeing that when I used the default (for inside IBM) policy of dropping
traffic from this udp port the MQTT messages did not get through, while if I
changed the rules to accept udp packets from this port the PQTT messages got
through.

Regards,
             Brian
http://www.brianodonovan.ie




On 28 October 2010 09:52, Roger Light <roger@xxxxxxxxxx> wrote:

> Hi Brian,
>
> > I wonder would you consider updating the install program for the
> mosquitto
> > package so that it configures iptables if it is installed on the machine
> (as
> > it will often be).
>
> I'll have to look into the distro policies about whether this is
> appropriate or not. If it's expected that network daemons update the
> firewall rules, I'll consider it. You can see that automatically
> updating firewall rules might be controversial though.
>
> > When I  did a bit more debugging I found to my surprise
> > that mosquitto is using UDP port 17500 as well as TCP port 1883
>
> Not as surprised as I am! :) There's no way mosquitto should be
> opening any UDP ports and I don't see any evidence of it on the
> instances I have running at the moment either. Can I ask how you came
> to that conclusion?
>
> Cheers,
>
> Roger
>
> _______________________________________________
> Mailing list: https://launchpad.net/~mqtt-users
> Post to     : mqtt-users@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~mqtt-users
> More help   : https://help.launchpad.net/ListHelp
>