Firewall breaking tftp

Distro Discussion & Help
1

I’ve been fighting with tftp server for the last few days, and got it to work when I disabled the firewall. After digging through the rules I noticed the established rule for udp only allows a few ports, and tftp isn’t one of them. I don’t see anywhere in the GUI this can be modified or corrected. How do I get tftp added to, or the port restriction removed from, the udp related established rule?

Chain fpbxfirewall (1 references)
target prot opt source destination
ACCEPT all – anywhere anywhere
ACCEPT tcp – anywhere anywhere state RELATED,ESTABLISHED
ACCEPT udp – anywhere anywhere udp spts:tcpmux:1024 state RELATED,ESTABLISHED

2

You enable it in Firewall Extra Services

Screen Shot 2016-07-29 at 8.31.29 AM.png1336×893 101 KB

3

Yes, It is enabled in extra services, the fpbxfirewall chain is where it is being blocked, not the zone chains.

Pasted image842×92 6.03 KB

4

and is the ip address of the phone or whatever is trying to tftp from the pbx also listed in the trusted zone?

5

No, It’s an external IP, which is selected as shown above.

6

you must still add the external ip address to the trusted zone. simply setting the firewall to say the service is external is not enough.