Why Won’t mt-daapd Work Unless It’s Open to the Internet?

[Linux User]

josephwinston, whatever your problem is, it’s not the firewall.

As your default polices are all ACCEPT and you have no DROP rules, your firewall is allowing all traffic through in all directions. The two rules you added don’t make a difference. They’re just allowing traffic that the default rules would have allowed anyway.

If you want to make the firewall useful, you should either (a) change the default policies to DROP and then add rules to just allow the traffic you want to allow, or (b) if you leave the default policies as ALLOW, at least add some DROP rules to protect against malicious traffic (e.g., block external traffic to certain services, like X11). Of the two approaches, option (a) is more secure but may take more work to figure out what traffic you need to allow to make things work, vis. my struggle above. While option (b) is better than nothing, there’s always the risk that you’ve overlooked closing off something that should be closed off.

[Author]

Posts