You're missing this entry from your .11 box: ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:postgres So iptables goes right to the end and then rejects with "Host Prohibited" which is reported on your .13 box as "No route to host" I think the command you want on your .11 box is: /sbin/iptables --insert RH-Firewall-1-INPUT 19 --protocol tcp --destination-port 5432 -j ACCEPT THINK BEFORE YOU PRINT - Save paper if you don't really need to print this *******************Confidentiality and Privilege Notice******************* The material contained in this message is privileged and confidential to the addressee. If you are not the addressee indicated in this message or responsible for delivery of the message to such person, you may not copy or deliver this message to anyone, and you should destroy it and kindly notify the sender by reply email. Information in this message that does not relate to the official business of Weatherbeeta must be treated as neither given nor endorsed by Weatherbeeta. Weatherbeeta, its employees, contractors or associates shall not be liable for direct, indirect or consequential loss arising from transmission of this message or any attachments e-mail. -- Sent via pgsql-admin mailing list (pgsql-admin@xxxxxxxxxxxxxx) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin
