Netscreen 25 blocking Backup Server
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Netscreen 25 blocking Backup Server

From: <I__Alone@hotmail.com>
Date: Tue Nov 29 2005 - 15:37:48 CET



My company just purchased a disk based backup server (Unitrends DPU


2000) and it was installed on our LAN.  Our LAN is connected to the


Trust Zone on a Netscreen 25 (Hardware Version 4010(0) Firmware


Version: 5.0.0 r 8.0).  We have an SMTP Server connected to the DMZ


Zone on the same Netscreen 25.



When the Backup Server attempts to run a backup on the SMTP server, I


get a "partial connection check IP filters/firewall" error.  Even with


a policy allowing all traffic between the 2 zones, I get this error.


Backups on servers in the Trust Zone run fine, so I've narrowed the


problem down to the netscreen.



The Backup Server uses 2 ports during operation, 1743 for a "control


channel" and 1744 for a "data channel".  In viewing the error logs on


the back up server I find the following "Cannot connect to IP


XXX.XXX.XXX.XXX port 1743  Address is in use for channel 1743.  <**


UNABLE TO BIND**> channel 1743.



What is the problem I am not seeing?



Any help would be appreciated.  Thanks



Scott


Received on Sat Dec  3 04:18:43 2005