Hello,
The Security Alert messages indicate the some one or some process is
probing your FD port but is not using Bacula protocol. It typically
happens with port scanners or programs attempting to see if the Bacula
FD is alive, neither of which are using Bacula communications protocols.
Best regards,
Kern
On 4/4/19 9:08 AM, Phil Stracchino wrote:
I am seeing the following message or messages like it in every backup
job that runs.
04-Apr 04:30 jumpgate-fd JobId 0: Security Alert: job.c:508 FD expecting
Hello got bad command from 10.24.32.15. Len=0.
04-Apr 04:30 asgard-fd JobId 0: Security Alert: Message repeated 1
times: job.c:508 FD expecting Hello got bad command from 10.24.32.15. Len=0.
04-Apr 04:30 narn-fd JobId 0: Security Alert: job.c:508 FD expecting
Hello got bad command from 10.24.32.15. Len=0.
In backups that ran on 9.4.1 this message is not present. Is there a
functional change in 9.4.2 relevant to this that requires some
configuration change? Or is it a bug?
Here's a complete example job log:
04-Apr 04:30 minbar-dir JobId 21695: shell command: run BeforeJob
"/etc/bacula/checkhost narn"
04-Apr 04:30 minbar-dir JobId 21695: BeforeJob: Client narn has address
10.24.32.16
04-Apr 04:30 minbar-dir JobId 21695: Start Backup JobId 21695,
Job=Narn_Backup.2019-04-04_04.30.00_30
04-Apr 04:30 minbar-dir JobId 21695: Using Device "FileStorage" to write.
04-Apr 04:30 narn-fd JobId 21695: /netstore is a different
filesystem. Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695: /proc is a different filesystem.
Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695: /run is a different filesystem.
Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695: /sys is a different filesystem.
Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695: /tmp is a different filesystem.
Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695: /var/httpd is a different
filesystem. Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695: /var/lib/nfs/rpc_pipefs is a
different filesystem. Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695: /shares is a different
filesystem. Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695: /dev/shm is a different
filesystem. Will not descend from /dev into it.
04-Apr 04:30 narn-fd JobId 21695: /dev/pts is a different
filesystem. Will not descend from /dev into it.
04-Apr 04:30 narn-fd JobId 21695: /dev/mqueue is a different
filesystem. Will not descend from /dev into it.
04-Apr 04:30 narn-fd JobId 0: Security Alert: job.c:508 FD expecting
Hello got bad command from 10.24.32.15. Len=0.
04-Apr 04:30 asgard-sd JobId 21695: Elapsed time=00:00:40, Transfer
rate=3.593 MBytes/second
04-Apr 04:30 minbar-dir JobId 21695: Bacula minbar-dir 9.4.2 (04Feb19):
Build OS: x86_64-pc-linux-gnu gentoo
JobId: 21695
Job: Narn_Backup.2019-04-04_04.30.00_30
Backup Level: Incremental, since=2019-04-03 04:30:03
Client: "narn" 9.4.2 (04Feb19) x86_64-pc-linux-gnu,gentoo,
FileSet: "Gentoo Full Set" 2011-11-04 15:18:14
Pool: "Incr-Disk" (From Job IncPool override)
Catalog: "Catalog" (From Client resource)
Storage: "asgard-file" (From Pool resource)
Scheduled time: 04-Apr-2019 04:30:00
Start time: 04-Apr-2019 04:30:03
End time: 04-Apr-2019 04:30:43
Elapsed time: 40 secs
Priority: 10
FD Files Written: 1,621
SD Files Written: 1,621
FD Bytes Written: 143,541,862 (143.5 MB)
SD Bytes Written: 143,750,160 (143.7 MB)
Rate: 3588.5 KB/s
Software Compression: None
Comm Line Compression: 66.4% 3.0:1
Snapshot/VSS: no
Encryption: no
Accurate: no
Volume name(s): INCR-20190404-04:30
Volume Session Id: 6
Volume Session Time: 1554343291
Last Volume Bytes: 2,440,308,820 (2.440 GB)
Non-fatal FD errors: 0
SD Errors: 0
FD termination status: OK
SD termination status: OK
Termination: Backup OK
04-Apr 04:30 minbar-dir JobId 21695: Begin pruning Jobs older than 12
months .
04-Apr 04:30 minbar-dir JobId 21695: No Jobs found to prune.
04-Apr 04:30 minbar-dir JobId 21695: Begin pruning Files.
04-Apr 04:30 minbar-dir JobId 21695: No Files found to prune.
04-Apr 04:30 minbar-dir JobId 21695: End auto prune.
_______________________________________________
Bacula-devel mailing list
Bacula-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-devel
