Amanda-Users

Re: Network / Seurity with ports?

2002-12-24 09:29:15
Subject: Re: Network / Seurity with ports?
From: Steve Bertrand <iaccounts AT northnetworks DOT ca>
To: neil.openshaw AT bigfoot DOT com, amanda-users AT amanda DOT org
Date: Tue, 24 Dec 2002 08:50:42 -0500
Hi Neil,

I just recently posted the following after finding the answer in google groups after weeks of searching:

The problem: My amanda box is behind a Netopia 7100-c nat gateway, and the netopia box mapped amanda ports to ports above 50000, which amanda deems as insecure. The netopia box does not appear to have any way to re-map the ports, so I was stuck. My amanda box is co-located on a colleagues network, so I couldn't just put the amanda box as the gateway.

Here's what I did to fix it:

- open common-src/security.c within the amanda source tree
- comment out the if-statement block that starts with
  if(ntohs(addr->sin_port >= IPPORT_RESERVED) {

For the non-developers, you can comment out the entire code block by putting the /* symbols before the block to start the comment, then the */ symbols after the block to close the comment quote.

Merry Christmas,

Steve Bertrand



neil.openshaw AT bigfoot DOT com wrote:

I'm new to amanda, I think my problem is with security;
Host_A is the backup server and Host_B is the client to be backed up.
I have the following problem;

bash-2.05$ amcheck -c daily

Amanda Backup Client Hosts Check
--------------------------------
ERROR: Host_B: [host Host_A: port 32782 not secure]
Client check: 1 host checked in 0.085 seconds, 1 problem found

Each time I run this the port number increases by one. The client is
running Mandrake8.2, the server Solaris8. I'm guessing the problem is
security, maybe on the client and the random port used talking back to
the server. Both the server and the client use the standard 10080.
Thanks in Advance for any help.

Neil..










<Prev in Thread] Current Thread [Next in Thread>