Since the probing is now visible in job logs, it would be useful to have a safe way of doing this.
Can probes use the Ping message? https://www.bacula.org/git/cgit.cgi/bacula/tree/bacula/src/filed/job.c?h=Branch-9.4#n489 __Martin >>>>> On Thu, 4 Apr 2019 18:06:26 +0200, Kern Sibbald said: > > Hello, > > The Security Alert messages indicate the some one or some process is > probing your FD port but is not using Bacula protocol. It typically > happens with port scanners or programs attempting to see if the Bacula > FD is alive, neither of which are using Bacula communications protocols. > > Best regards, > Kern > > On 4/4/19 9:08 AM, Phil Stracchino wrote: > > I am seeing the following message or messages like it in every backup > > job that runs. > > > > > > 04-Apr 04:30 jumpgate-fd JobId 0: Security Alert: job.c:508 FD expecting > > Hello got bad command from 10.24.32.15. Len=0. > > > > 04-Apr 04:30 asgard-fd JobId 0: Security Alert: Message repeated 1 > > times: job.c:508 FD expecting Hello got bad command from 10.24.32.15. Len=0. > > > > 04-Apr 04:30 narn-fd JobId 0: Security Alert: job.c:508 FD expecting > > Hello got bad command from 10.24.32.15. Len=0. > > > > > > In backups that ran on 9.4.1 this message is not present. Is there a > > functional change in 9.4.2 relevant to this that requires some > > configuration change? Or is it a bug? > > > > > > Here's a complete example job log: > > > > 04-Apr 04:30 minbar-dir JobId 21695: shell command: run BeforeJob > > "/etc/bacula/checkhost narn" > > 04-Apr 04:30 minbar-dir JobId 21695: BeforeJob: Client narn has address > > 10.24.32.16 > > 04-Apr 04:30 minbar-dir JobId 21695: Start Backup JobId 21695, > > Job=Narn_Backup.2019-04-04_04.30.00_30 > > 04-Apr 04:30 minbar-dir JobId 21695: Using Device "FileStorage" to write. > > 04-Apr 04:30 narn-fd JobId 21695: /netstore is a different > > filesystem. Will not descend from / into it. > > 04-Apr 04:30 narn-fd JobId 21695: /proc is a different filesystem. > > Will not descend from / into it. > > 04-Apr 04:30 narn-fd JobId 21695: /run is a different filesystem. > > Will not descend from / into it. > > 04-Apr 04:30 narn-fd JobId 21695: /sys is a different filesystem. > > Will not descend from / into it. > > 04-Apr 04:30 narn-fd JobId 21695: /tmp is a different filesystem. > > Will not descend from / into it. > > 04-Apr 04:30 narn-fd JobId 21695: /var/httpd is a different > > filesystem. Will not descend from / into it. > > 04-Apr 04:30 narn-fd JobId 21695: /var/lib/nfs/rpc_pipefs is a > > different filesystem. Will not descend from / into it. > > 04-Apr 04:30 narn-fd JobId 21695: /shares is a different > > filesystem. Will not descend from / into it. > > 04-Apr 04:30 narn-fd JobId 21695: /dev/shm is a different > > filesystem. Will not descend from /dev into it. > > 04-Apr 04:30 narn-fd JobId 21695: /dev/pts is a different > > filesystem. Will not descend from /dev into it. > > 04-Apr 04:30 narn-fd JobId 21695: /dev/mqueue is a different > > filesystem. Will not descend from /dev into it. > > 04-Apr 04:30 narn-fd JobId 0: Security Alert: job.c:508 FD expecting > > Hello got bad command from 10.24.32.15. Len=0. > > 04-Apr 04:30 asgard-sd JobId 21695: Elapsed time=00:00:40, Transfer > > rate=3.593 MBytes/second > > 04-Apr 04:30 minbar-dir JobId 21695: Bacula minbar-dir 9.4.2 (04Feb19): > > Build OS: x86_64-pc-linux-gnu gentoo > > JobId: 21695 > > Job: Narn_Backup.2019-04-04_04.30.00_30 > > Backup Level: Incremental, since=2019-04-03 04:30:03 > > Client: "narn" 9.4.2 (04Feb19) > > x86_64-pc-linux-gnu,gentoo, > > FileSet: "Gentoo Full Set" 2011-11-04 15:18:14 > > Pool: "Incr-Disk" (From Job IncPool override) > > Catalog: "Catalog" (From Client resource) > > Storage: "asgard-file" (From Pool resource) > > Scheduled time: 04-Apr-2019 04:30:00 > > Start time: 04-Apr-2019 04:30:03 > > End time: 04-Apr-2019 04:30:43 > > Elapsed time: 40 secs > > Priority: 10 > > FD Files Written: 1,621 > > SD Files Written: 1,621 > > FD Bytes Written: 143,541,862 (143.5 MB) > > SD Bytes Written: 143,750,160 (143.7 MB) > > Rate: 3588.5 KB/s > > Software Compression: None > > Comm Line Compression: 66.4% 3.0:1 > > Snapshot/VSS: no > > Encryption: no > > Accurate: no > > Volume name(s): INCR-20190404-04:30 > > Volume Session Id: 6 > > Volume Session Time: 1554343291 > > Last Volume Bytes: 2,440,308,820 (2.440 GB) > > Non-fatal FD errors: 0 > > SD Errors: 0 > > FD termination status: OK > > SD termination status: OK > > Termination: Backup OK > > > > 04-Apr 04:30 minbar-dir JobId 21695: Begin pruning Jobs older than 12 > > months . > > 04-Apr 04:30 minbar-dir JobId 21695: No Jobs found to prune. > > 04-Apr 04:30 minbar-dir JobId 21695: Begin pruning Files. > > 04-Apr 04:30 minbar-dir JobId 21695: No Files found to prune. > > 04-Apr 04:30 minbar-dir JobId 21695: End auto prune. > > > > > > > > _______________________________________________ > Bacula-devel mailing list > Bacula-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bacula-devel > _______________________________________________ Bacula-devel mailing list Bacula-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-devel
