Re: Which ports to open in which direction...

David Leangen wrote:

does your current setup work for you? I guess it should work
most of the time. In your case, it'll fail when it couldn't find an
open port in tcp 50000:50100 or in udp 700:710.



Actually, I haven't yet had time to see this through all the way. I was
hoping that the docs would be clear about which ports I need to open (and
only which ports), but I find I'm a bit confused...

I was hoping for some clarification, and I thought the wiki page would be
the best instrument to do this so that others may profit.


In any case, I have no problems with my local connections, but I need to
figure out which ports to open for my remote connections.

This is as far as my understanding goes. Think you could clarify the rest of
the process for me?

 IP Traffic

 Waiting state:
      RHost listens on 10080/udp
      FWHost listens on 10080/udp
      LHost listens on 10080/udp
      TSHost listens on 10080/udp

 amdump process begins:
      TSHost sends request to RHost on port 10080/udp (via FWHost)
      TSHost sends request to FWHost on port 10080/udp
      TSHost sends request to LHost on port 10080/udp
      TSHost sends request to localhost on port 10080/udp

 amandad process begins on each client:
      xHost accepts request on 10080/upd
      xHost replies to TSHost on a port in --with-tcpportrange


The above is taken from the wiki page:

  http://wiki.zmanda.com/index.php/Configuration_with_iptables


What happens after each host replies to the tape server host over

{--with-tcpportrange}? Or is that all?

that should be it for backing up if the ports within tcpportrange can befound. Otherwise, it's currently subjected to the [*] below.

Then for amrecover, it needs privileged (< 1024) TCP ports forcommunication to the server. That could be why amrecover is problmaticin firewall environment. It uses up to 3 ports.

I am working on changing -with-tcpportrange, -with-updportrange to beconfigurable in amanda.conf. I likely need to split them into threecategories:


udp_privileged_port_range
tcp_privileged_port_range {new}
tcp_normal_port_range

Will update with more information soon.

[*]Currently, amanda will try the tcpportrange/udpportrange first. If it
couldn't find an open port in that range, it will try to get ANY open
port. In this case, it will fail in your firewall setup.




--
Thank you!
Kevin Till

Amanda documentation: http://wiki.zmanda.com
Amanda forums:        http://forums.zmanda.com