Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 3993 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

TCP port 807 and 2546

johnmunyi
hi Guys,

Am having trouble opening the above ports on my Astaro V 7.5, i need these port opens for my offsite backup hosted in another network and my 3 servers need to use the port to initialize the process of backup. Anyone with an idea on how to implement this?

Will greatly appreciate. Cheers !!


This thread was automatically locked due to age.
  • 0
    I suggest you oen the Packet Filter Live Log, enter the IP of one of the servers in the Filter box and then start a backup for that server.  You should be able to see what's getting blocked.  Also, check the Intrusion Prevention log to be sure that the activity isn't being blocked as a flooding attempt.

    Cheers - Bob
  • 0 in reply to BAlfson
    Hi Bob,

    I have checked the log file and this is what i found: what could this be and how can i solve it? i have edited the real IPs in this log for obvious resons. I appreciate

    ulogd[3586]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" seq="0" initf="eth0" outitf="eth1" dstmac="00:23:7d:fc:67:81" srcmac="e4:11:5b:ce:33:a6" srcip="***.***.x.x" dstip="***.***.xx.***" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="65370" dstport="2546" tcpflags="SYN"
  • 0
    More logs:

    2012:06:08-16:06:59 *** ulogd[3586]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" seq="0" initf="eth0" outitf="eth1" dstmac="00:23:7d:fc:67:81" srcmac="e4:11:5b:ce:33:a6" srcip="***.***.x.x" dstip="***.***.xx.xx" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="65380" dstport="807" tcpflags="SYN" 

    The source IP is my server, the destination IP is the offsite backup server
  • 0
    Do you have a packet filter rule to allow this traffic?  If so, can you provide a screenshot of the PF rule(s) and of the custom service definitions you may have created for the above services.
  • 0
    Hi Scott,

    I don't have any packet filter rule for that traffic, that is exactly what i wanna put in place, mind helping [:)]
  • 0
    'Network Security >> Firewall' [New Rule]

    Source: {your server}
    Service: {group with definitions for 1:65535->807 and 1:65535->2546}
    Destination: {backup server}



    Cheers - Bob
  • 0
    And you'll probably need Masquerading set up, if it isn't already.

    Barry
  • 0
    cheers guys, will definately get back to you when am successful