Hi,
   I have Solaris 8 boxes running ipfilter 3.4.31 (upgrade!) where
one serves as the Netbackup server (4.5) and others serve as clients.
I was lazy on my server and client and just set point-to-point
"take all traffic" rules for both clients and the server:

pass in from [remote IP] to [local IP]
pass out from [local IP] to [remote IP]

This let netbackup do its thing.  In my case, I have full control
over both clients and server, even if they are on different subnets
and I don't trust other machines on the remote subnets.

A more picky approach would be to only allow traffic for the
following Netbackup ports:

bprd    13720/tcp       bprd
bpjava-msvc     13722/tcp       bpjava-msvc
bpcd    13782/tcp       bpcd
vopied  13783/tcp       vopied
vnetd   13724/tcp       vnetd

-----------------------------------
Jeff A. Earickson, Ph.D
Senior UNIX Sysadmin and Email Guru
Information Technology Services
Colby College, 4214 Mayflower Hill,
Waterville ME, 04901-8842
phone: 207-872-3659 (fax = 3076)
-----------------------------------

On Thu, 6 Mar 2003, John Thomas wrote:

> Date: Thu, 6 Mar 2003 14:03:26 -0500
> From: John Thomas <[EMAIL PROTECTED]>
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> Subject: Configuring IPFilter 3.4.29 for Veritas Netbackup
>
> All,
>
> Does anyone have any experience with configuring
> IPFilter for a Veritas NetBackup Client (Solaris2.6 4.5GA)?
>
> The machine is a SunBlade 1000 running Solaris 2.8.
>
> John
>

Reply via email to