Re: Remote Client Security Alerts

I set up firewalld on the client. This was a learning curve but has done
the trick. It depends on the Dir server having a static ip since it's not
possible to set a source address as a FQDN in firewalld. I didn't find a
way round that in case the server has a DHCP address. Fortunately my ISP
does provide a static ip but many or most do not.

-Chris-

On Fri, 27 Sept 2024, 13:51 Josip Deanovic via Bacula-users, <
[email protected]> wrote:

> On 2024-09-17 13:57, Dragan Milivojević wrote:
> > AFAIK there is no such feature on the FD side but I might be wrong.
>
> If the option "--with-tcp-wrappers" is used for building Bacula
> daemons, Bacula daemons would make use of libwrap library.
>
> I recommend using local firewall rather than tcp wrappers mechanism
> which is best described as a host based networking ACL system.
>
> Some major Linux distribution dropped support for tcp wrappers
> completely
> few years ago.
>
> A lot of people never learned about tcp wrappers and those who did,
> often used them incorrectly.
> In that light, I would say: good riddance.
>
>
> > On Tue, 17 Sept 2024 at 13:52, Chris Wilkinson <[email protected]>
> > wrote:
> >>
> >> Is that something that can be done in the FD or is it a job for
> >> iptables?
> >>
> >> -Chris Wilkinson
> >>
> >> On Tue, 17 Sep 2024, 12:48 Dragan Milivojević, <[email protected]>
> >> wrote:
> >>>
> >>> These are just automated scans. I would not run a FD open to the
> >>> world.
> >>> Block anything but the DIR and SD from contacting the FD?
> >>>
> >>> On Tue, 17 Sept 2024 at 12:43, Chris Wilkinson
> >>> <[email protected]> wrote:
> >>> >
> >>> > I keep getting security alerts from a remote client backup. The
> backups always run to success. The IPs that are listed in the job log are
> different every time and in various locations including some in Russia but
> also in London and European data centres. There are no entries at all in
> the remote client bacula log. This only happens with remote client backups,
> never with local client backups.
> >>> >
> >
> >
> > _______________________________________________
> > Bacula-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/bacula-users
>
> --
> Josip Deanovic
>
>
> _______________________________________________
> Bacula-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>

_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users