Amanda-Users

Re: Port NNNN not secure (revisited)

2006-07-17 20:10:57
Subject: Re: Port NNNN not secure (revisited)
From: Mike Allen <mallen AT familyradio DOT org>
To: Kevin Till <kevin.till AT zmanda DOT com>
Date: Mon, 17 Jul 2006 17:04:31 -0700
Kevin Till wrote:
Mike Allen wrote:
Kevin Till wrote:

Mike Allen wrote:



try configure with "--with-tcpportrange=50000,50100 --with-udpportrange=512,1023 ..." and recompile.

Open the corresponding ports in the firewall setup.


The reason udp port 34932 was tried because Amanda cannot find a reserved udp port that it can use.



The following occurred while compiling with the values you suggested:
<snip>


Hi,

add "-with-tcpportrange=50000,50100 --with-udpportrange=512,1023" to whatever you have in your configure line. For example:

./configure --with-user=amandabackup --with-group=disk -with-tcpportrange=50000,50100 --with-udpportrange=512,1023


Run configure again and make install.


After configuring both the ta;e server and the client with the suggested portranges above
I got the  following:


14:46:02.501703 IP famrad.familyradio.org.47737 > familyserv.familyradio.org.amanda: UDP, length: 123 14:46:02.543577 IP familyserv.familyradio.org.amanda > famrad.familyradio.org.47737: UDP, length: 50 14:46:02.544603 IP familyserv.familyradio.org.amanda > famrad.familyradio.org.47737: UDP, length: 109 14:46:02.549035 IP famrad.familyradio.org.47737 > familyserv.familyradio.org.amanda: UDP, length: 50


Notice the reference to port 47737 which is outside the range(s) specified. I have a feeling I am doing
something really stupid!

Any help will be greatly appreciated.

Is there a firewall in between? If it's iptables, you can tell by running "iptables -L".

The page below could be helpful too.
http://wiki.zmanda.com/index.php/Configuration_with_iptables


Mike

Yes there is a firewall in between the tape-host and the client. It is NOT IP-tables based but
is commercially made by Netgear. (That may be my problem).

An assumption I am making is the path(s) from where I do my configurations. I'm using /usr/ports/.misc/amanda-client/work/amanda* and /usr/ports/misc/amanda-server/work/amanda* on the client and server respectively. Am I (re)configuring my system from the correct directory
on my FreeBSD system?


Mike