Forum Discussion

kjh's avatar
kjh
Level 3
16 years ago

Linux Backups not working with Netfilter (iptables) firewall on

Here's the problem: backups of a Debian 4 Linux machine running RALUS agent v 12.0.1364, from a BEx 12.0.1364 server running on Win2k3, fail when the Linux Netfilter (iptables) firewall was turned on. Even with the ndmp port (TCP 10000) opened up, the backup jobs still fail. 

12.x and Earlier
Agents
Backup and Recovery
Backup Exec
Linux
Mac OS
  • kjh's avatar
    kjh
    16 years ago

    Here's the solution (well at least my solution at any rate):

     

    I didn't care for other posts on the boards that recommended disabling the firewall altogether. Surely there must be some way to get at least some protection.

     

    So I turned on iptables logging and kicked off a test backup job to see what ports BEx was trying to get to on the Linux box. It turns out that there were so many that I just decided to allow all conns from the BEx server. Works like a charm.


    Sample iptables line that I appended to the end of the INPUT filter. I added it to the end so that any DROP rules would apply first.

     

    iptables -A INPUT -p tcp -m tcp -s 172.16.0.6 -j ACCEPT

    Don't forget to save your rules! HTH.

  • kjh's avatar
    kjh
    Level 3
    16 years ago

    Here's the solution (well at least my solution at any rate):

     

    I didn't care for other posts on the boards that recommended disabling the firewall altogether. Surely there must be some way to get at least some protection.

     

    So I turned on iptables logging and kicked off a test backup job to see what ports BEx was trying to get to on the Linux box. It turns out that there were so many that I just decided to allow all conns from the BEx server. Works like a charm.


    Sample iptables line that I appended to the end of the INPUT filter. I added it to the end so that any DROP rules would apply first.

     

    iptables -A INPUT -p tcp -m tcp -s 172.16.0.6 -j ACCEPT

    Don't forget to save your rules! HTH.