No, 10.32.12.18 is not the IP of the client to be backed up. I’m guessing that 
was the IP of the Nessus scanner.

--Shawn

On 3/5/18, 11:48 AM, "Josip Deanovic" <djosip+n...@linuxpages.net> wrote:

    On Monday 2018-03-05 12:32:50 Dimitri Maziuk wrote:
    > On 03/05/2018 12:00 PM, Josip Deanovic wrote:
    > > On Monday 2018-03-05 17:08:45 Shawn Rappaport wrote:
    > >> Thank you, Patti! You were correct. It turns out there was a
    > >> vulnerability scan run against that network at that time.
    > > 
    > > Did you configure your bacula to use SSL/TLS connection?
    > > I wonder if that would help in your case.
    > 
    > I'd expect to still see "invalid HELO" logged. Firewalling the port
    > would work if the scanner and bacula clients live in different subnets.
    
    But the log says: UA Hello from client:10.32.12.18:9101
    The same IP was mentioned several times in the logs Shawn provided.
    
    The question is: is the IP 10.32.12.18 the IP of the client that had
    to be backed up?
    
    If yes then the vulnerability scan overtook the client's IP.
    
    -- 
    Josip Deanovic
    
    
------------------------------------------------------------------------------
    Check out the vibrant tech community on one of the world's most
    engaging tech sites, Slashdot.org! 
https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot&d=DwICAg&c=sy2pFYeXOTBQJUPqadkFIXq5lzPIgQxhI8DCCAdSjYc&r=N3_BTL1Tt2ryeleRqn2wc-R4w3v0TnI7dlgnwdQ7zE8&m=wPBX6OgHHj7MV7gxOQnY5082cQ6UQimXGy_zUId9AEk&s=t6x_0Qp-42lkZWidsQ1GprGuNjHMqy03eQf7EY3q4QY&e=
    _______________________________________________
    Bacula-users mailing list
    Bacula-users@lists.sourceforge.net
    
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_bacula-2Dusers&d=DwICAg&c=sy2pFYeXOTBQJUPqadkFIXq5lzPIgQxhI8DCCAdSjYc&r=N3_BTL1Tt2ryeleRqn2wc-R4w3v0TnI7dlgnwdQ7zE8&m=wPBX6OgHHj7MV7gxOQnY5082cQ6UQimXGy_zUId9AEk&s=KpPQj-PVt6jtDqYpxWXzkYFL5GRAB4MrFcPCHfMqdTI&e=
    

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to