Amanda-Users

Re: Still get ERROR [host fw.my.co.uk: port 62679 not secure] after I added my ipchain rule:

2006-02-16 08:08:33
Subject: Re: Still get ERROR [host fw.my.co.uk: port 62679 not secure] after I added my ipchain rule:
From: Paul Bijnens <paul.bijnens AT xplanation DOT com>
To: chuck AT smtl.co DOT uk, Amanda List <amanda-users AT amanda DOT org>
Date: Thu, 16 Feb 2006 14:03:51 +0100

On 02/16/2006 01:39 PM, Chuck Amadi Systems Administrator wrote:

Yesterday Someone posted a amadmin command to egrep
--with-udpportrange=NNNN,NNNN
So I can check my tape server.

Please could you resend the amadmin ConfigName | egrep -i
--with-udpportrange=1001,1009
something like that thx.


   amadmin x version | grep configure

without "grep" for more information...



I also run the tcpdump port 10080 on the amanda client and then on the
amanda tape server  on amcheck ConfigName and I could see that the port
on my main tape server was 957 which is privileged port.

The port was not 1001, 1009 on the amanda tape server.

Which seems to imply that another program than then one you
compiled was run...
But even it would be the right program, the other side sees the
packets coming from some port > 60000, even if it the source
port was 1001 instead of 957.  Which is a NAT problem on the firewall,
which cannot be solved by recompiling with a stricter udp range.


--
Paul Bijnens, xplanation Technology Services        Tel  +32 16 397.511
Technologielaan 21 bus 2, B-3001 Leuven, BELGIUM    Fax  +32 16 397.512
http://www.xplanation.com/          email:  Paul.Bijnens AT xplanation DOT com
***********************************************************************
* I think I've got the hang of it now:  exit, ^D, ^C, ^\, ^Z, ^Q, ^^, *
* F6, quit, ZZ, :q, :q!, M-Z, ^X^C, logoff, logout, close, bye, /bye, *
* stop, end, F3, ~., ^]c, +++ ATH, disconnect, halt,  abort,  hangup, *
* PF4, F20, ^X^X, :D::D, KJOB, F14-f-e, F8-e,  kill -1 $$,  shutdown, *
* init 0, kill -9 1, Alt-F4, Ctrl-Alt-Del, AltGr-NumLock, Stop-A, ... *
* ...  "Are you sure?"  ...   YES   ...   Phew ...   I'm out          *
***********************************************************************