Re: How to backup the firewall host itself? SOLVED

Also, i´d like to inform that redhat 8.0 comes with two amanda related
iptables helper modules:

- ip_conntrack_amanda
(which solved my problem)
- ip_nat_amanda
(for those who have an iptables firewall with NAT enabled, between the
server and client machines)

Bruno Negrao.

----- Original Message ----- 
From: "Bruno Negrão" <bnegrao-amanda AT engepel.com DOT br>
To: "amanda users" <amanda-users AT amanda DOT org>
Sent: Thursday, September 18, 2003 3:50 PM
Subject: Re: How to backup the firewall host itself? SOLVED


Yes, this patch solves the problem and is the best approach. Actually, the
redhat linux 8.0 is shipped with this module.
So, to avoid the firewall machine of blocking the server data transfer
connection, i needed to activate the following commands:

/sbin/modprobe ip_conntrack_amanda
iptables -A INPUT -p ALL -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p UDP --dport 10080 -s $AMANDA_SERVER_IP -j ACCEPT

that´s all,
Bruno Negrão.

----- Original Message ----- 
From: "Bruno Negrão" <bnegrao-amanda AT engepel.com DOT br>
To: "amanda users" <amanda-users AT amanda DOT org>
Sent: Thursday, September 18, 2003 3:17 PM
Subject: Re: How to backup the firewall host itself?


Guys, I´m reading documents about a "amanda-conntrack-nat patch".
Does someone out there already tested it? Can it solve my problem?

Bruno.
----- Original Message ----- 
From: "Bruno Negrão" <bnegrao-amanda AT engepel.com DOT br>
To: "amanda users" <amanda-users AT amanda DOT org>
Sent: Thursday, September 18, 2003 3:02 PM
Subject: How to backup the firewall host itself?


Hi all,

I have an amanda server on my DMZ and i like it to backup my firewall
machine(the amanda client).
I configured the firewall machine to accept INPUT packets on the UDP port
10080.
What is not working is the server connection to the data port. Which is the
best approach to make this work?
(ps: i´m using redhat 8.0 with iptables)

I´ve already read the faq answer
http://amanda.sourceforge.net/fom-serve/cache/139.html but i didn´t find it
that illuminating since it´s related to a firewall between the server and
client machines.

thank you,
Bruno Negrão.