[Bacula-users] Firewall

[Lowe, Bryan]

I apologize if this has been addressed, but I couldn’t find anything in the archives.  If this is the incorrect list for this inquiry, please point me in the correct direction.   I’ve been using Bacula (1.36.0) to back up our servers for about 2 years now.  Everything has been running fine, until I was given the additional responsibility of running our firewall. I tightened down rules between our LAN (where the bacula server resides, Solaris 9 box) and the DMZ to only allow necessary services through.    Since I’ve tightened down the rules, 2 of my DMZ server backups are failing.  One is running Solaris 8, and the other is running Red Hat Enterprise (release 3).  My Solaris 9 and other Red Hat boxes in the DMZ are backing up fine, it’s just those 2 that choke.  When I check my firewall logs, the service that gets blocked seems to be different every week! One week it’s tcp port 39450 and port 36401, the next week it’s 50596 and 39398, etc.    Does anyone have any ideas what I need to open up, short of opening up the entire LAN to DMZ rule? Is there a way to force Bacula to use a particular service for whatever is being blocked?  Any suggestions would be appreciated.      Thanks