You can try something like iptables -A INPUT -i lo -j ACCEPT # allows all ports on local interface iptables -A INPUT -p tcp --dport 3478 -j ACCEPT # opens TCP port 3478 for all interfaces. iptables save Validate settings with iptables -L, make sure that the packets are not dropped before they reach the rule in the INPUT chain Domain vs. IP address: What does your /etc/hosts show for the internal interface? If it specifies the domain name, I'd insert it to the STUN config rather than the IP address, especially, if the global IP is dynamically assigned.
↧