iptables masking www.osgeo.org binding to ldap server

[warmerdam]

Howard,

I think your recent iptables change has made it so that I can't bind to the ldap server using www.osgeo.org instead of localhost.

For instance, the following hangs due to the failure:

​http://www.osgeo.org/cgi-bin/ldap_web_search.py

I have changed the Trac notification logic to use "localhost" as a temporary work around, but the ldap search and user creation are broken for now.

[hobu]

We needed INPUT rules for our LDAP. Updated /etc/sysconfig/iptables-custom/LDAP as follows:

*filter
-I INPUT -p tcp -s 66.223.95.242/29 --dport 389 -j ACCEPT
-I INPUT -p tcp -s 198.202.74.1/24 --dport 636 -j ACCEPT
-A OUTPUT -p tcp --dport 389 -j ACCEPT
-A OUTPUT -p tcp --dport 636 -j ACCEPT
COMMIT