Help - Search - Members - Calendar
Full Version: DiskSync Firewall Ports
The Planet Forums > System Administration > Backups, Restores and Transfers
Gracetek
Just in case anyone else runs into the same problem I did with identifying the ports to open I am posting the information I received from tech support:

QUOTE
Your firewall must permit all traffic on ports 807 and 2546 to and from the Director which services your server(s). Your firewall must also permit all traffic on port 808 to and from your server and whichever location you intend to run Agent Console from.

-Mario
klaude
Thread stickied! This is good to know. Thanks for sharing. icon_smile.gif
jscott
Yes... Unfortunately we sometimes make mistakes. In this case, the FAQ and other documents were listing port "2456", when in fact it was "2546".

That would be my fat fingers that caused the problem. icon_redface.gif
TAK
/me goes and adjusts his firewall.

BTW, on the Disk Sync configure page (disksync_configure.html), it would be nice if the instructions could be spaced out a bit more clearly, it is right now mashed together and very difficult to follow as you are setting up DS.
jscott
I agree.

It's on our to-do list, and should be re-formatted soon.
TAK
Still one more instance of "2456" here: https://orbit.theplanet.com/nav_services/n5...tablerules.html
jscott
Excellent eye. Thanks for the catch. I'll submit it for update.
neij
Hi, not sure where to post this but I think it might be a firewall error so hope it's OK here.

I have just installed Disksync, but after creating a new task it says "Unable to register Backup task. Possible causes, in order of probability, are:
1. Network is down.
2. Invalid Network address for the vault.
3. Incorrect vault profile information."

I think it might be a firewall port issue: although I have opened both 807 and 2546 for both TCP and UDP in RRAS (and they are showing as open), a quick run through grc.com's Probe My Ports says that 807 and 2546 are Closed.

Any ideas would be very welcome!

neij
jscott
Greetings,

I would recommend opening a support ticket so this can be properly investigated.

Thank you!
neij
QUOTE (jscott)
Greetings,

I would recommend opening a support ticket so this can be properly investigated.

Thank you!


I had come to that conclusion too and have now done so. Thanks for your response!

Neij
trec
any clue how to do it on APF?
(how to write the iptables on the apf configuration for disk sync?)

QUOTE
** Add these rules if you have DiskSync Backup service. Be sure to fill in the ip info for your Director and Agent Console. You can find the information by reading the install ticket, or by contacting us.

iptables -N plnt_dsync
iptables -A plnt_in -s **your_DiskSync_Director** -j plnt_dsync
iptables -A plnt_out -d **your_DiskSync_Director** -j plnt_dsync
iptables -A plnt_in -s **your_DiskSync_Agent_Console** -j plnt_dsync
iptables -A plnt_out -d **your_DiskSync_Agent_Console** -j plnt_dsync
iptables -A plnt_dsync -m state --state ESTABLISHED -j ACCEPT
iptables -A plnt_dsync -p tcp --dport 807:808 -j ACCEPT
iptables -A plnt_dsync -p tcp --dport 2546 -j ACCEPT
Aerosmith
Im setting DiskSynch up now. I am setting up the ports to open and I'd prefer to open them JUST to the IP of the back up server (no need to alow ANYONE to use those ports). Can someone tell me the IP(s) of the back up server(s) so I can add them to the allow IPs rules in csf?

Thanks,
DB
jscott
QUOTE (Aerosmith @ Jun 19 2007, 07:40 PM) *
Im setting DiskSynch up now. I am setting up the ports to open and I'd prefer to open them JUST to the IP of the back up server (no need to alow ANYONE to use those ports). Can someone tell me the IP(s) of the back up server(s) so I can add them to the allow IPs rules in csf?

Thanks,
DB


DB,

The ports are protected by encryption and authentication.

Only outgoing ports need to connect to the backup server. If you are not blocking outgoing ports, then you need only worry about your connection to your Agent running on your server.
Aerosmith
QUOTE (jscott @ Jun 22 2007, 09:32 AM) *
DB,

The ports are protected by encryption and authentication.

Only outgoing ports need to connect to the backup server. If you are not blocking outgoing ports, then you need only worry about your connection to your Agent running on your server.


Cool
Aerosmith
OK folsk I am having a LOT of trouble setting up DiskSynch. The biggest problem is that I am extremely dyslexic and the instructions provided in orbit are way too long and drawn out. I can't read that much without it runng all together into one big pile of words that make no sense.

Rigt now I have downloaded the DiskCSync Consoel Agent and it is installed. I opened port 808 to my IP in my firewall and was able to set up the an Agent for my server and the Get Status processed correctly. Thats where I hit the wall and the words dont amke sense any more.

What I would like to do is this...
Open the minimum ports to he minimum IPs to allow the back ups to be set up and run.
Confgure back ups to run (manually only for now if thast possible).
Run a test back up to ensure its all working correctly.

I only have the free 2GB that came with the special that TP has running now and I do not want to go over that limit. I basically got the DiskSynch because it was free with the package. Right now its more of a trial run to see if I really want to use it as opposed to teh remotr FTP backups I do now.

Thanks to anyone who can help me with this.
jscott
Greetings,

Have you opened a ticket for this yet? Typically our support crew can have the basic installation done for you while you wait. If you have already entered a ticket, please let me know the ticket number(s) and I'll ensure that they are being looked at for you.

Thanks!
Aerosmith
Justin thanks for the reply. I have not done anything on the server side yet. All I have set up is the DiskSync Console Agent. I got that installed locally, entered all of my info, and was able to successfully Get Status. I am not sure if the Get Status button successfully recognizing the server indicates that the server side is already set up. I am guessing it is set up, but hey I have guessed wrong before! icon_smile.gif Anyway let me know based on this if it appears that I still need something done on the server side and if so I will establish a TT. If not, I think all I need to do is finish configuring the Console Admin locally. This is the part where the instructions started running together for me. Let me know what you think the next step is and we can get it rolling. This is NOT an extreme priority for me right now. If you have fire to put out go for that first.

BTW: I just re-read my last post and I am quite amazed you were even able to decipher it with all the typos. Told you I am dyslexic! icon_smile.gif

DB
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.