xinetd uses tcp wrappers (/etc/hosts.{allow,deny}), plus any statements in /etc/xinetd.d/tftp even though it's a UDP service... Are you denying it somehow through there?<br><br>I'm pretty sure tftp is NAT friendly. Since it's hitting syslog, my guess is the wrappers config.
<br><br>Sean<br><br><div><span class="gmail_quote">On 5/18/06, <b class="gmail_sendername">John Lange</b> <<a href="mailto:john.lange@open-it.ca">john.lange@open-it.ca</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I believe that I'm having a problem with the OpenWRT and tftp.<br><br>I'm trying to fetch a file outside of the OpenWRT firewall using tftp<br>but on the server side I see these messages:<br><br>in.tftpd[26104]: tftpd: read(ack): Connection refused
<br><br>The client just times out.<br><br>I suspect its a nat issue with the OpenWRT perhaps related to the fact<br>the OpenWRT listens on a tftp port for uploads of firmware?<br><br>Or is tftp generally tricky through nat? I can't see why it would be.
<br><br>Is there some kind of iptables parameter that needs to be added? Scant<br>little comes up on google for iptables, nat and tftp.<br><br>--<br>John Lange<br>OpenIT ltd. <a href="http://www.Open-IT.ca">www.Open-IT.ca
</a> (204) 885 0872<br>VoIP, Web services, Linux Consulting, Server Co-Location<br><br>_______________________________________________<br>Asterisk mailing list<br><a href="mailto:Asterisk@muug.mb.ca">Asterisk@muug.mb.ca</a>
<br><a href="http://www.muug.mb.ca/mailman/listinfo/asterisk">http://www.muug.mb.ca/mailman/listinfo/asterisk</a><br><br></blockquote></div><br><br clear="all"><br>-- <br>Sean Walberg <<a href="mailto:sean@ertw.com">sean@ertw.com
</a>> <a href="http://ertw.com/">http://ertw.com/</a>