Bacula-users

Re: [Bacula-users] iptables problem

2012-06-06 11:11:39
Subject: Re: [Bacula-users] iptables problem
From: hymie! <hymie AT lactose.homelinux DOT net>
To: bacula-users AT lists.sourceforge DOT net
Date: Wed, 06 Jun 2012 10:38:03 -0400
Laurent MANCHON writes:

>bacula returns this error message:
>
>06-juin 14:56 Bacula-dir JobId 1569 : Warning: bsock.c:129 impossible to 
>connect at Storage daemon on 192.168.1.15:9103. ERR=Connection failed
>
>i think i have a problem with my iptables rules but i don't know where, 
>i need somebody help to resolve this problem.

I'm not an iptables expert, but your rules seem **very** complex for a
machine whose IP address begins with 192.168 .  You didn't specify
if these are the iptables rules on your bacula server, or on the storage
server (or if they are the same machine).

That said ...

What happens when you telnet 192.168.1.15 9103 ?  Do you get a connection?
SYN_SENT?  SYN_RECV?

># bacula rules
>$IPT -A OUTPUT -p tcp --dport 9102:9103 -o $INTERNET -m state --state 
>NEW -j ACCEPT
>$IPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 9101:9103 -j ACCEPT

I'm not sure why you're restricting yourself to only NEW connections.

--hymie!    http://lactose.homelinux.net/~hymie    hymie AT lactose.homelinux 
DOT net
-------------------------------------------------------------------------------

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

<Prev in Thread] Current Thread [Next in Thread>