JayJay,
        ON the NetWorker server and client you have the whole range of ports 
opened and on the firewall you have opened only 2 ports. You have no control on 
what ports will be used on the server here. Calculate the number of ports that 
your environment required using the formula given below and have those ports 
opened on the firewall.

Formula : 12 + (2 * #devices) + (#jukeboxes)

Example :
        You have 1 Jukebox and 2 Tape drives, the total number of ports that 
are required are -> 12+(2*2)+1 = 15. So you should have ports 7937-7952 set on 
the server and the client, this can be done using the command "nsrports -S 
7937-7952". Do this on both server and the client, once done I would recommend 
a restart of the NetWorker services both side. Ask you firewall engineer to 
open the ports   7937-7952 for UDP, TCP and bidirectional communication. Test 
backups. 

HTH
Rovin A. D'Souza 



-----Original Message-----
From: EMC NetWorker discussion [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU] On 
Behalf Of JayJay
Sent: Friday, August 24, 2012 6:54 PM
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Subject: [Networker] Trouble with saving through firewall

Port range on networker server:

Service ports: 7937-9936
Connection ports: 0-0


And Port range on the client:

Service ports: 7937-9936
Connection ports: 0-0

TCP and UDP ports 111, 7937 and 7938 are opened bidirectional. Telnet onto 
these ports work fine.

>From server:
[root@networker-server]# telnet networker-client 111 Trying 1.1.1.1...
Connected to networker-client (1.1.1.1).
Escape character is '^]'.
^]
telnet> q
Connection closed.
[root@networker-server]# telnet networker-client 7937 Trying 1.1.1.1...
Connected to networker-client (1.1.1.1).
Escape character is '^]'.
^]
telnet> q
Connection closed.
[root@networker-server]# telnet networker-client 7938 Trying 1.1.1.1...
Connected to networker-client (1.1.1.1).
Escape character is '^]'.
^]
telnet> q
Connection closed.
[root@networker-server]# telnet networker-client 7939 Trying 1.1.1.1...
telnet: connect to address 1.1.1.1: Connection refused
telnet: Unable to connect to remote host: Connection refused

>From client:
networker-client:~ # telnet networker-server 111 Trying 1.1.1.1...
Connected to networker-server.
Escape character is '^]'.
^]
telnet> q
Connection closed.
networker-client:~ # telnet networker-server 7937 Trying 1.1.1.1...
Connected to networker-server.
Escape character is '^]'.
^]
telnet> q
Connection closed.
networker-client:~ # telnet networker-server 7938 Trying 1.1.1.1...
Connected to networker-server.
Escape character is '^]'.
^]
telnet> q
Connection closed.
networker-client:~ # telnet networker-server 7939 Trying 1.1.1.1...
telnet: connect to address 1.1.1.1: Connection refused

+----------------------------------------------------------------------
|This was sent by jan.jacobsen AT edeka DOT de via Backup Central.
|Forward SPAM to abuse AT backupcentral DOT com.
+----------------------------------------------------------------------