Bacula-users

Re: [Bacula-users] Firewall woes

2009-06-15 03:17:20
Subject: Re: [Bacula-users] Firewall woes
From: "Ken Barclay" <ken.barclay AT qbmore DOT com>
To: <bacula-users AT lists.sourceforge DOT net>
Date: Mon, 15 Jun 2009 14:13:43 +0700 (ICT)
Well, I added state ESTABLISHED and RELATED to the iptables on both the
Director and Client Servers, restarted iptables and manually started the
backup job.  This is the reply:

*messages
15-Jun 09:07 submail-fd JobId 8425: Warning: bsock.c:123 Could not connect
to Storage daemon on 192.168.2.146:9103. ERR=Connection timed out
Retrying ...

(Yes, the Storage daemon is running)

Next, I added Client Connect Wait = 1800 to the StorageDaemon config, but
still got the same error message as above.

Then, in /etc/hosts of the Director, I hashed out 127.0.0.1, leaving only
the 'real' ip address of the director.  But still got the same error.

Finally, I disabled iptables on the Client and the back up completed
without a problem.

Any ideas?

Ken

> -----Original Message-----
> From: Marc Schiffbauer [mailto:marc AT schiffbauer DOT net]
> Sent: Friday, 12 June 2009 7:56 PM
> To: bacula-users AT lists.sourceforge DOT net
> Subject: Re: [Bacula-users] Firewall woes
> 
> * Ken Barclay schrieb am 12.06.09 um 11:56 Uhr:
> > Don't you just love firewalls!
> >
> >
> >
> > Today received this error on a newly installed client -
> >
> >
> >
> > 12-Jun 16:27 KenTest-dir JobId 8309: Fatal error: Unable to
> authenticate
> > with File daemon at "192.168.2.130:9102". Possible causes:blah,etc
> >
> >
> >
> >
> >
> > On this client the iptable entry reads as follows:      1    ACCEPT
> > tcp  --  192.168.2.146        0.0.0.0/0           tcp dpt:9102 state
> NEW
> 
> 
> You need state ESTABLISHED and RELATED for the other direction, not?
> 
> 
> >
> >
> >
> > On the director the iptable entry reads:     11   ACCEPT     tcp  --
> > 0.0.0.0/0            0.0.0.0/0           tcp dpts:9101:9103 state NEW
> 
> same here.
> 
> -Marc
> 
> --
> 8AAC 5F46 83B4 DB70 8317  3723 296C 6CCA 35A6 4134
> 
> -----------------------------------------------------------------------
> -------
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensing option that enables unlimited
> royalty-free distribution of the report engine for externally facing
> server and web deployment.
> http://p.sf.net/sfu/businessobjects
> _______________________________________________
> Bacula-users mailing list
> Bacula-users AT lists.sourceforge DOT net
> https://lists.sourceforge.net/lists/listinfo/bacula-users

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

<Prev in Thread] Current Thread [Next in Thread>