Bot can't connect when iptables are active

[tonnuminat]

Hey guys!
I got the bot running and it is working fine but it can't connect to the ts3 server when iptables are active.

My iptables setup:

Spoiler

Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:http dpts:32786:61000
ACCEPT tcp -- anywhere anywhere tcp spts:32786:61000 dpt:http
ACCEPT udp -- anywhere anywhere udp spt:domain dpts:1024:65535
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT udp -- anywhere anywhere udp dpt:9987
ACCEPT tcp -- anywhere anywhere tcp dpt:30033
ACCEPT tcp -- anywhere anywhere tcp dpt:10011
ACCEPT tcp -- anywhere anywhere tcp spt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:8087

Chain FORWARD (policy DROP)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Anything I am missing here?

 

[CrAazZyMaN21]

Hey guys!
I got the bot running and it is working fine but it can't connect to the ts3 server when iptables are active.

My iptables setup:

Spoiler

Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:http dpts:32786:61000
ACCEPT tcp -- anywhere anywhere tcp spts:32786:61000 dpt:http
ACCEPT udp -- anywhere anywhere udp spt:domain dpts:1024:65535
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT udp -- anywhere anywhere udp dpt:9987
ACCEPT tcp -- anywhere anywhere tcp dpt:30033
ACCEPT tcp -- anywhere anywhere tcp dpt:10011
ACCEPT tcp -- anywhere anywhere tcp spt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:8087

Chain FORWARD (policy DROP)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Anything I am missing here?

Is this the iptables config from your bot or the ts3server? What Is the error from the log?

 

[tonnuminat]

Okay with the help of Xuxe and flyth I figured it out. I am going post the solution for people with the same problem.
Worth mentioning here is that in my case the bot and the server run on the same system.

As you should know the bot runs on on an instance of X-Server to provide the TS-Client with an virtual GUI. The X-Server and the host system communicate via the virtual network adapter called "lo". That means you will have to accept traffic on this adapter if bot and server run on the same machine.
You do this with this command:

iptables -A INPUT -i lo -j ACCEPT

This opens all ports on the adapter. However this isn't a security problem since it is for local connections only.
The bot should now be able to connect.

If you have problems listening to web radios/downloading yt videos add this rule:

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

This allows all connections that before were established by your machine.

Is this the iptables config from your bot or the ts3server? What Is the error from the log?

Already solved the probem but thank you for your effort!