On 5 Oct 2006 at 16:42, James Ray wrote:
> Dan Langille wrote:
> > On 5 Oct 2006 at 16:29, James Ray wrote:
> >
> >> Dan Langille wrote:
> >>> On 5 Oct 2006 at 15:36, James Ray wrote:
> >>>
> >>>> Dan Langille wrote:
> >>>>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
> >>>>>
> >>>>>> I haven't had time to investigate whether the [FD|SD|DIR]Address sets
> >>>>>> both the listening and the outgoing address, but a firewall audit is
> >>>>>> on the TODO list, and when I finally get to it, I'll have to address
> >>>>>> this for a number of services, not only Bacula.
> >>>>> My testing today shows that is sets both listening and outgoing. All
> >>>>> I tested was a status command. Nothing more.
> >>>>>
> >>>>>
> >>>> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
> >>>>
> >>>> The LISTEN addresses are right but the address the communications spawn
> >>>> from is the base system address.
> >>>>
> >>>> tcp 0 0 xxx.xxx.x.49:9101 0.0.0.0:*
> >>>> LISTEN 100 9291 3056/bacula-dir
> >>>> tcp 0 0 xxx.xxx.x.49:9103 0.0.0.0:*
> >>>> LISTEN 0 9239 3011/bacula-sd
> >>>>
> >>>> Then run a status client command with the following ngrep running (I
> >>>> shouldn't see any data)
> >>>>
> >>>> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
> >>>> xxx.xxx.x.3"
> >>>> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> >>>> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
> >>>> 114 received, 0 dropped
> >>>>
> >>>> And I see the following in netstat:
> >>>>
> >>>> tcp 0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
> >>>> TIME_WAIT 0 0 -
> >>>>
> >>>> :(
> >>> Without the corrresponding configuration file, I cannot comment.
> >>>
> >> Director{} resource from bacula-dir.conf
> >> Director { # define myself
> >> Name = bacula-dir
> >> DIRport = 9101 # where we listen for UA connections
> >> QueryFile = "/etc/bacula/query.sql"
> >> WorkingDirectory = "/var/bacula/working"
> >> PidDirectory = "/var/bacula/run"
> >> Maximum Concurrent Jobs = 8
> >> Password = <REMOVED> # Console password
> >> Messages = Daemon
> >> DirAddress = xxx.xxx.x.49
> >> }
> >
> > This tells the FD that only the given DIR may connect. This does not
> > tell the FD where it should listen. To tell the FD how to listen,
> > here is what I did:
> >
> > FileDaemon {
> > Name = ngaio-fd
> > FDport = 9102
> > WorkingDirectory = /home/bacula/db
> > Pid Directory = /var/run
> > Maximum Concurrent Jobs = 20
> >
> > FDAddress = 192.168.0.68;
> > }
> >
> > This is an extract from the bacula-fd.conf file.
> >
> > The FDAddress directive tells the FD to listen (and answer) only on
> > that given address.
> >
> > I think you know what to do now... ;)
> >
>
> I think you are confused....
> The FD is listening on another machine on the correct IP address, its
> the Director that is talking out of the the 'wrong' (for want of a
> better name) IP address.
>
> The server where the director is running has two interfaces (one
> phyiscal one virtual), of .48 and .49, I want it to talk out of the .49
> IP addresses, however it sends out communications from the .48 IP address.
>
> Does that clear it up? (confusing I know!)
I just tested this with the latest BETA code (for bacula-dir;
bconsole was 1.38.11, but I do not think that will affect these
results).
The bacula-dir config:
Director { # define myself
Name = ngaio-dir
DIRport = 9101 # where we listen for UA connections
QueryFile = "/usr/local/share/bacula/query.sql"
WorkingDirectory = "/home/bacula/db"
PidDirectory = "/var/run"
Maximum Concurrent Jobs = 3
Password = "****" # Console password
Messages = Daemon
DirAddress = 192.168.0.68
}
The bconsole.conf:
Director {
Name = ngaio-dir
DIRport = 9101
Address = 192.168.0.68
# address = ngaio
Password = "***"
}
Connecting thusly:
$ bconsole -c ~/bconsole.conf
Connecting to Director 192.168.0.68:9101
1000 OK: ngaio-dir Version: 1.39.24 (02 October 2006)
Enter a period to cancel a command.
*
All comms went via 192.168.0.68
Monitored like this:
sudo tcpdump -ni fxp0 port 9101 | grep -v 10.55.0.68
Any questions? I'll answer.
I used the beta because it was already installed on this machine.
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users
