On 06/01/2014 03:54 PM, Igor Gnatenko wrote: > -A IN_0brain_allow -p udp -m udp --dport 20595 -m conntrack --ctstate > NEW -j ACCEPT I've no idea what else except 20595/udp you need. You can run 'ss -putnl | grep <binary name>' to see what ports the program listens on. -- Jiri