I set up firewalld on the client. This was a learning curve but has done the trick. It depends on the Dir server having a static ip since it's not possible to set a source address as a FQDN in firewalld. I didn't find a way round that in case the server has a DHCP address. Fortunately my ISP does provide a static ip but many or most do not.
-Chris- On Fri, 27 Sept 2024, 13:51 Josip Deanovic via Bacula-users, < bacula-users@lists.sourceforge.net> wrote: > On 2024-09-17 13:57, Dragan Milivojević wrote: > > AFAIK there is no such feature on the FD side but I might be wrong. > > If the option "--with-tcp-wrappers" is used for building Bacula > daemons, Bacula daemons would make use of libwrap library. > > I recommend using local firewall rather than tcp wrappers mechanism > which is best described as a host based networking ACL system. > > Some major Linux distribution dropped support for tcp wrappers > completely > few years ago. > > A lot of people never learned about tcp wrappers and those who did, > often used them incorrectly. > In that light, I would say: good riddance. > > > > On Tue, 17 Sept 2024 at 13:52, Chris Wilkinson <winstonia...@gmail.com> > > wrote: > >> > >> Is that something that can be done in the FD or is it a job for > >> iptables? > >> > >> -Chris Wilkinson > >> > >> On Tue, 17 Sep 2024, 12:48 Dragan Milivojević, <gali...@pkm-inc.com> > >> wrote: > >>> > >>> These are just automated scans. I would not run a FD open to the > >>> world. > >>> Block anything but the DIR and SD from contacting the FD? > >>> > >>> On Tue, 17 Sept 2024 at 12:43, Chris Wilkinson > >>> <winstonia...@gmail.com> wrote: > >>> > > >>> > I keep getting security alerts from a remote client backup. The > backups always run to success. The IPs that are listed in the job log are > different every time and in various locations including some in Russia but > also in London and European data centres. There are no entries at all in > the remote client bacula log. This only happens with remote client backups, > never with local client backups. > >>> > > > > > > > _______________________________________________ > > Bacula-users mailing list > > Bacula-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/bacula-users > > -- > Josip Deanovic > > > _______________________________________________ > Bacula-users mailing list > Bacula-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bacula-users >
_______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
