Also, keep in mind that the ports on the server will need to be limited too.
We had to open up ports 7937-7940 outbound to the client on the firewall,
and limit the client to those ports. Then on the server and storage nodes we
limited the port range as well (I think for our environment it was
7937-8020) and let only those ports inbound. Plus if you are using Avamar
for deduplication through Networker you need port 27000 inbound and outbound
as well.

We spent a week and a half fighting with this issue, hope yours goes better
than ours did.

Kate

------------------------------


Date:    Tue, 3 Nov 2009 09:09:49 -0600
From:    Anacreo <anacreo AT GMAIL DOT COM>
Subject: Re: Backing up server in DMZ

Use nsrports on the client to set a range...  and then open up that range
through the FW.

Alec

On Thu, Oct 29, 2009 at 8:35 AM, John Brekelbaum <jbrekelbaum AT gmail DOT com
>wrote:

> If I am using standard ports what is an example of a rule I would ask my
> firewall admin to add?
> Thanks!

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER