firewall (iptables) ports for multi-server environment?

[tiger2000]

Dear All,

We're installing two ZCS server (5.0.2) for testing multi server installation.

Before starting "iptables" service, everything goes well, for instance, we
can login Admin Console, and "Server Status" can display two server's status.

After we setup the iptables (according to
Firewall Configuration - Zimbra :: Wiki ), several
functions acts strangely, e.g. "Server Status" only shows one record.

Can anyone advise is there any special ports we need to open except
those mentioned in
Firewall Configuration - Zimbra :: Wiki ?

Thanks.
Rgds,
Kevin

[uxbod]

I would check the ports you have enabled against a

netstat -an

to see what has been missed.

[mmorse]

How have you configured these?
389, 514, 7025, 7047, 7306, 7307, 7071, 7780, 10024, 10025
(All of those limited to internal server net & some will be communication just within the respective boxes themselves, but they're a good place to start looking.)

[bdial]

yeah port 514 is probably responsible for missing server status since thats the syslog port and the logger depends on the other servers to log their status to this port.