Bacula-users

Re: [Bacula-users] Firewall woes

2009-06-15 10:24:45
Subject: Re: [Bacula-users] Firewall woes
From: Josh Fisher <jfisher AT pvct DOT com>
To: Ken Barclay <ken.barclay AT qbmore DOT com>
Date: Mon, 15 Jun 2009 10:21:04 -0400
Ken Barclay wrote:
> Well, I added state ESTABLISHED and RELATED to the iptables on both the
> Director and Client Servers, restarted iptables and manually started the
> backup job.  This is the reply:
>
>   

On both Director and Client, and SD as well, the listening socket has to 
accept packets in the NEW state, or there will never be any packets with 
state ESTABLISHED,RELATED.

> *messages
> 15-Jun 09:07 submail-fd JobId 8425: Warning: bsock.c:123 Could not connect
> to Storage daemon on 192.168.2.146:9103. ERR=Connection timed out
> Retrying ...
>
> (Yes, the Storage daemon is running)
>
> Next, I added Client Connect Wait = 1800 to the StorageDaemon config, but
> still got the same error message as above.
>
> Then, in /etc/hosts of the Director, I hashed out 127.0.0.1, leaving only
> the 'real' ip address of the director.  But still got the same error.
>
> Finally, I disabled iptables on the Client and the back up completed
> without a problem.
>
> Any ideas?
>
> Ken
>
>   
>> -----Original Message-----
>> From: Marc Schiffbauer [mailto:marc AT schiffbauer DOT net]
>> Sent: Friday, 12 June 2009 7:56 PM
>> To: bacula-users AT lists.sourceforge DOT net
>> Subject: Re: [Bacula-users] Firewall woes
>>
>> * Ken Barclay schrieb am 12.06.09 um 11:56 Uhr:
>>     
>>> Don't you just love firewalls!
>>>
>>>
>>>
>>> Today received this error on a newly installed client -
>>>
>>>
>>>
>>> 12-Jun 16:27 KenTest-dir JobId 8309: Fatal error: Unable to
>>>       
>> authenticate
>>     
>>> with File daemon at "192.168.2.130:9102". Possible causes:blah,etc
>>>
>>>
>>>
>>>
>>>
>>> On this client the iptable entry reads as follows:      1    ACCEPT
>>> tcp  --  192.168.2.146        0.0.0.0/0           tcp dpt:9102 state
>>>       
>> NEW
>>
>>
>> You need state ESTABLISHED and RELATED for the other direction, not?
>>
>>
>>     
>>>
>>> On the director the iptable entry reads:     11   ACCEPT     tcp  --
>>> 0.0.0.0/0            0.0.0.0/0           tcp dpts:9101:9103 state NEW
>>>       
>> same here.
>>
>> -Marc
>>
>> --
>> 8AAC 5F46 83B4 DB70 8317  3723 296C 6CCA 35A6 4134
>>
>> -----------------------------------------------------------------------
>> -------
>> Crystal Reports - New Free Runtime and 30 Day Trial
>> Check out the new simplified licensing option that enables unlimited
>> royalty-free distribution of the report engine for externally facing
>> server and web deployment.
>> http://p.sf.net/sfu/businessobjects
>> _______________________________________________
>> Bacula-users mailing list
>> Bacula-users AT lists.sourceforge DOT net
>> https://lists.sourceforge.net/lists/listinfo/bacula-users
>>     
>
> ------------------------------------------------------------------------------
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensing option that enables unlimited
> royalty-free distribution of the report engine for externally facing 
> server and web deployment.
> http://p.sf.net/sfu/businessobjects
> _______________________________________________
> Bacula-users mailing list
> Bacula-users AT lists.sourceforge DOT net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>   

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

<Prev in Thread] Current Thread [Next in Thread>