On Thu, 10 Jun 2004 at 9:31am, Paul Bijnens wrote

> Steven Schoch wrote:
> 
> > Now we're getting somewhere.  The tcpdump shows this:
> > 
> > 15:01:56.739818 homer > marge: icmp: host homer unreachable - admin 
> > prohibited [tos 0xc0]
> > 
> > My guess is that ICMP message is something to do with a firewall.
> 
> 
> "admin prohibited" is definately a result of iptables filtering.
> Have a close look in homer.  Execute "iptables -L".
> 
> Maybe the solution is loading the amanda iptables module,
> if that is available on the machine.

I'd be interested to see if that fixes it.  My amanda server which runs 
the nightlies of the (small) home partitions has been at RH9 for a while, 
and has this as the only rule it needed to get amdump working:

# If we've an established session, well, okay
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 

I recently moved my other amanda server (which backs up my 4.5TB of RAID 
space) to RH9.  The first few nights, most of the clients were failing 
with estimate timeouts.  But when I tested during the day (with small 
partitions), everything worked.  I finally decided that the estimates on 
the big partitions were taking long enough that the above rule was timing 
out.  I couldn't afford another night of the backups failing, so I didn't 
try loading the amanda module -- I just added rules to allow incoming 
UDP traffic on priviledged ports from the clients.

-- 
Joshua Baker-LePain
Department of Biomedical Engineering
Duke University