Amanda-Users

Re: database01 /export lev 0 FAILED 20031222[could not connect to database01]

2003-12-22 11:40:29
Subject: Re: database01 /export lev 0 FAILED 20031222[could not connect to database01]
From: Joshua Baker-LePain <jlb17 AT duke DOT edu>
To: Dean Pullen <dean.pullen AT virtuefusion DOT com>
Date: Mon, 22 Dec 2003 11:35:02 -0500 (EST)
On Mon, 22 Dec 2003 at 4:23pm, Dean Pullen wrote

> I'm getting a failure when running amdump.
> database01 /export lev 0 FAILED 20031222[could not connect to database01]
> 
> It seems I'm having a few different packets dropped to different ports when
> using amdump, so presumably this is the problem.
> 
> What ports does amanda use? I'm seeing ports such as 32776, 32777, 32778 etc
> appear in my shorewall packet drop log.

Amanda connects to random unpriviledged ports on the client.  These are my 
iptables rules on amanda clients:

-A INPUT -p udp -s $SERVER -d 0/0 --dport 10080 -j ACCEPT
-A INPUT -p tcp -m tcp -s $SERVER -d 0/0 --dport 1025:65535 -j ACCEPT

The first one says "allow all UDP traffic incoming to port 10080 from 
$SERVER".  The second says "allow all TCP traffic incoming to any 
unpriviledged port from $SERVER".

-- 
Joshua Baker-LePain
Department of Biomedical Engineering
Duke University