----- Forwarded Message ----- 
From: RYAN M. vAN GINNEKEN <[EMAIL PROTECTED]> 
To: bacula-users@lists.sourceforge.net, Dave <[EMAIL PROTECTED]> 
Sent: Wednesday, June 20, 2007 11:01:25 AM GMT-0700 
Subject: [Bacula-users] firewall/natd 









THANKS DAVE as i mentioned bacula used to work when these two machine were on 
the same internal network. So i believe the password should not have changed 
however i have attached some relevant files. 

Hello, 
It looks like your firewall setup is good. I believe the problem is the file 
and director passwords don't all match up. Give that a shot, and if you can't 
find it, send me the client's bacula-fd.conf, and the servers bacula-dir.conf 
and bacula-sd.conf files. 
I just went through this one myself with nat and a firewall so i should be able 
to help. 
Hth 
Dave. 
Using bacula version 2.0.3 on the client and the server 
can achieve perfect backups when these machines are on the same internal 
network however...... 

....I am tring to set bacula up to backup a remote machine that is on the other 
side of of a firewall. I have read and reread the bacula docs the ipf docs and 
the ipnat docs and think i understand what should be done. However it does not 
seem to work please help. 

******I have added the following lines to the ipf.rules file of the director 
machine 

pass out quick on cdce0 proto tcp from any to any port = 9101 flags S keep 
state 
pass out quick on cdce0 proto tcp from any to any port = 9102 flags S keep 
state 
pass out quick on cdce0 proto tcp from any to any port = 9103 flags S keep 
state 

******next i added the following to the ipf.rules file of the server machine 
that provides a firewall and nat for the fd machine. 

pass in quick on xl0 proto tcp from any to any port = 9102 flags S keep state 

******* then i have added the following ipnat rules to hopefully redirect port 
9102 to the desired machine behind the firewall running the file daemon 

rdr xl0 0/32 port 9102 -> 192.168.0.15 port 9102 

*******I believe if have all the correct entries in the director and file 
daemon and can telnet to the the remote port 

[EMAIL PROTECTED] # telnet computerking.ca 9102 
Trying 68.146.204.152... 
Connected to computerking.ca. 
Escape character is '^]'. 

*****but when i try to connect to the client from bconsole i always get the 
dreaded auth error. please please please help as this has become a very 
complicated endeavor and i am a bit lost as to what to try next. 

Connecting to Client lappy-fd at computerking.ca:9102 
Failed to connect to Client lappy-fd. 
==== 
20- Jun 01 :10 backup1-dir: *Console*.2007-06-20_01.10.01 Fatal error: Unable 
to authenticate with File daemon on "computerking.ca:9102". Possible causes: 
Passwords or names not the same or 
Maximum Concurrent Jobs exceeded on the FD or 
FD networking messed up (restart daemon). 
Please see http://www.bacula.org/rel-manual/faq.html#AuthorizationErrors for 
help. 




-- 
Computer King & CaN Mail - Sales Service Hosting Backup 

http://www.computerking.ca http://www.canmail.org 

NEW!!! Custom Service Packages 
Secure IMAP Email - Automated Remote Backups - Photo Blogs - Online Accounting 
Packages 



-- 
Computer King & CaN Mail - Sales Service Hosting Backup 

http://www.computerking.ca http://www.canmail.org 

NEW!!! Custom Service Packages 
Secure IMAP Email - Automated Remote Backups - Photo Blogs - Online Accounting 
Packages 

Attachment: bacula-dir.conf
Description: Binary data

Attachment: bacula-fd.conf
Description: Binary data

Attachment: bacula-sd.conf
Description: Binary data

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to