iptables rules for iscsi initiator

view story

http://unix.stackexchange.com – I need to configure iptables on my client (iscsi-initiator). From tcpdump, I can see that the server (iscsi target) sends tcp from port 3260. So I have added following iptables rule on my client (where is the iscsi target): -A INPUT -i eth1 -s -p tcp -m tcp --dport 3260 -j ACCEPT but iscsi does not work with this rule. Only after I allow all ports, does it work: -A INPUT -i eth1 -s -p tcp -m tcp -j ACCEPT Thus my question is, does iscsi need some other port as well? (HowTos)