Amanda-Users

Re: Port NNNN not secure (revisited)

2006-07-17 19:36:12
Subject: Re: Port NNNN not secure (revisited)
From: Jon LaBadie <jon AT jgcomp DOT com>
To: amanda-users AT amanda DOT org
Date: Mon, 17 Jul 2006 19:28:49 -0400
On Mon, Jul 17, 2006 at 03:58:17PM -0700, Mike Allen wrote:
> Kevin Till wrote:
> >Mike Allen wrote:
> >
> >>>
> >>>
> >>>try configure with "--with-tcpportrange=50000,50100 
> >>>--with-udpportrange=512,1023 ..." and recompile.
> >>>
> >>>Open the corresponding ports in the firewall setup.
> >>>
> >>>
> >>>The reason udp port 34932 was tried because Amanda cannot find a 
> >>>reserved udp port that it can use.
> >>>
> >>>
> >>>
> >>The following occurred while compiling with the values you suggested:
> >><snip>
> >>
> >
> >Hi,
> >
> >add "-with-tcpportrange=50000,50100 --with-udpportrange=512,1023" to 
> >whatever you have in your configure line. For example:
> >
> >./configure --with-user=amandabackup --with-group=disk 
> >-with-tcpportrange=50000,50100 --with-udpportrange=512,1023
> >
> >
> >Run configure again and make install.
> >
> >
> After configuring both the ta;e server and the client with the suggested 
> portranges above
> I got the  following:
> 
> 
> 14:46:02.501703 IP famrad.familyradio.org.47737 > 
> familyserv.familyradio.org.amanda: UDP, length: 123
> 14:46:02.543577 IP familyserv.familyradio.org.amanda > 
> famrad.familyradio.org.47737: UDP, length: 50
> 14:46:02.544603 IP familyserv.familyradio.org.amanda > 
> famrad.familyradio.org.47737: UDP, length: 109
> 14:46:02.549035 IP famrad.familyradio.org.47737 > 
> familyserv.familyradio.org.amanda: UDP, length: 50
> 
> 
> Notice the reference to port 47737 which is outside the range(s) 
> specified.  I have a feeling I am doing
> something really stupid!
> 

When you made your changes, before doing the configure,
did you first do a "make distclean"?  Then do your
configure and make and make install.

Configure caches some info and perhaps it is not resetting
your portrange requests.

I'm not sure where/which header they should be in, but you
might check amanda.h under common-src.

-- 
Jon H. LaBadie                  jon AT jgcomp DOT com
 JG Computing
 4455 Province Line Road        (609) 252-0159
 Princeton, NJ  08540-4322      (609) 683-7220 (fax)