CIPE wierdness in RH7.3

cipe-1.5.4-6 was working fine on RH7.2. I was using a firewall rule for
cipe port like this:

## CIPE
iptables -A cable-out -d 66.xx.xx.xx -p udp --sport 6061 --dport 6061 \
-j ACCEPT
iptables -A cable-in -s 66.xx.xx.xx -p udp --sport 6061 --dport 6061 \
-j ACCEPT

Everything is great. Now, RH7.3 upgrades cipe to cipe-1.5.4-9. Now the
above rule no longer works. Cipe-1.5.4-9 seems to transmit from a port
different than the one it receives on. So, I open up the rule a bit:

iptables -A cable-out -d 66.xx.xx.xx -p udp --dport 6061 -j ACCEPT
iptables -A cable-out -d 66.xx.xx.xx -p udp --sport 6061 -j ACCEPT
iptables -A cable-in -s 66.xx.xx.xx -p udp --dport 6061 -j ACCEPT
iptables -A cable-in -s 66.xx.xx.xx -p udp --sport 6061 -j ACCEPT

This works for a while, but then, cipe wants to switch to port 6063, and
gets blocked by the firewall. Then it shuts down:

Sep 26 11:40:09 lord kernel: cipcb1: new peer 192.168.xx.10:6061
Sep 26 11:40:10 lord kernel: cipcb1: new peer 192.168.xx.10:6063
Sep 26 11:40:10 lord kernel: cipcb1: new peer 192.168.xx.10:6061
Sep 26 11:40:10 lord kernel: cipcb1: new peer 192.168.xx.10:6063
Sep 26 11:40:10 lord kernel: cipcb1: new peer 192.168.xx.10:6061
Sep 26 11:40:12 lord kernel: cipcb1: new peer 192.168.xx.10:6063
Sep 26 11:40:13 lord kernel: cipcb1: new peer 192.168.xx.10:6061
Sep 26 11:40:14 lord kernel: cipcb1: new peer 192.168.xx.10:6063
Sep 26 11:40:14 lord kernel: cipcb1: new peer 192.168.xx.10:6061
Sep 26 11:40:14 lord kernel: cipcb1: new peer 192.168.xx.10:6063
Sep 26 11:40:14 lord kernel: cipcb1: new peer 192.168.xx.10:6061
Sep 26 11:40:15 lord kernel: cipcb1: new peer 192.168.xx.10:6063
Sep 26 11:40:15 lord ciped-cb[18166]: kxchg: recv: Connection refused
Sep 26 11:40:21 lord last message repeated 11 times

If I restart, it runs for a while, then does the same thing! It looks
like cipe-1.5.4-9 is broken.

Both the RH7.2 and RH7.3 systems are running kernel-2.4.20-19.7.i686

Even more strange, There is another cipe connection on the same RH7.3
server on port 6060, which works perfectly (except for requiring the
relaxed firewall rule).

--
Stuart D. Gathman <(E-Mail Removed)>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flamis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.