$IPT -A INPUT -p tcp -d $MYIP --dport 427 -j ACCEPT
$IPT -A INPUT -p udp -d $MYIP --dport 427 -j ACCEPT
$IPT -A INPUT -p tcp -d 239/8 --dport 427 -j ACCEPT
$IPT -A INPUT -p udp -d 239/8 --dport 427 -j ACCEPT
$IPT -A INPUT -p tcp -d $MYIP --dport 548 -j ACCEPT



The following is false for Netatalk 1.6.x and 2.x. Installing the
modules will cause the daemons to hang when you try to stop
atalk. The modern atalk startup script automatically loads/unloads
modules as necessary.

A:  The "appletalk" and "ipddp" kernel modules have to be installed under
    linux for Netatalk to function. The appletalk module can be automatically
    loaded by adding the line "alias net-pf-5 appletalk" to the
    /etc/modules.conf file. Issuing the command "modprobe (module)" will
    load the module for the current session.


Netatalk 1.6

Error:
dsi_tcp: Can't resolve hostname (tull). 128.143.19.166 on interface eth0 wil
l be used instead.

Solution:
I solved this by adding the name 'tull' to my /etc/hosts. Apparently,
afpd REALLY wants to use some kind of abbreviated host name, but then
also wants to look that name up. I have no idea how this works in the
real Apple software, but it fails in Netatalk unless you add a
workaround.


Error:
dsi_tcp_open: invalid header
dsi_stream_read(0): Interrupted system call


Solution:
The version of Netatalk you have won't work on your OS. Get Netatalk
version 2.