Re: [Bacula-users] Firewall fun

2009-06-24 Thread Dirk Bartley
On Tue, 2009-06-23 at 21:52 +0200, Arno Lehmann wrote: > Hi, > > 23.06.2009 17:04, Dirk Bartley wrote: > > Sure, iptables allows for connection based rules as well as the old > > ipchains style rules based rules. > > > > So your probably using connection based rules like : > > iptables -A INPUT

Re: [Bacula-users] Firewall fun

2009-06-23 Thread Dirk Bartley
On Tue, 2009-06-23 at 21:52 +0200, Arno Lehmann wrote: > Hi, > > 23.06.2009 17:04, Dirk Bartley wrote: > > Sure, iptables allows for connection based rules as well as the old > > ipchains style rules based rules. > > > > So your probably using connection based rules like : > > iptables -A INPUT

Re: [Bacula-users] Firewall fun

2009-06-23 Thread Arno Lehmann
Hi, 23.06.2009 17:04, Dirk Bartley wrote: > Sure, iptables allows for connection based rules as well as the old > ipchains style rules based rules. > > So your probably using connection based rules like : > iptables -A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT > iptables -A OUTPUT -p

Re: [Bacula-users] Firewall fun

2009-06-23 Thread Dirk Bartley
Sure, iptables allows for connection based rules as well as the old ipchains style rules based rules. So your probably using connection based rules like : iptables -A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT iptables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT just ad

[Bacula-users] Firewall fun

2009-06-23 Thread Dirk Bartley
Greetings Moved a machine into a dmz behind a pix515e firewall. Created a rule to allow the fd to connect to the sd and it seems to work, except for one little peculiarity on a larger backup job. On a server that backs up about 60GB, it fails at the very tail end of the backup. The firewall log