File or Object Recovery Blocked by Firewall on Target Server

Product version: 9.0

Last modified: 27 September 2019

Problem

A firewall installed on the target server blocks recovering files/objects with NAKIVO Backup & Replication.

Background

A firewall installed on the target server is not configured properly to allow recovering files/objects with NAKIVO Backup & Replication.

Solution

Linux

Proceed as follows to configure the firewall on Linux:

  1. Log in to the server to be used for restoring files/objects.

  2. Make sure that the firewalld package is installed:

    dpkg --status firewalld

  3. Open the TCP port 9445 for the firewalld daemon:

    firewall-cmd --add-port=9445/tcp

  4. To check the port is opened, run the command:

    firewall-cmd --list-ports 9445/tcp

Alternatively, place the file named bhsvc.xml with the following content to the folder /etc/firewalld/services/:

<?xml version="1.0" encoding="utf-8"?><service> <short>bhsvc</short> <description> DESCRIPTION
     NAKIVO Recovery Service.
 NOTES This script is a part of the Nakivo Backup & Replication Service.
     Copyright 2011-2018 Nakivo Inc.
     ALL RIGHTS RESERVED.
     PROPRIETARY/CONFIDENTIAL.
     This software is the confidential and proprietary information
     of Nakivo Inc.
     You shall not disclose such Confidential Information and shall
     use it only in accordance with the terms of the license agreement
     you entered into with Nakivo Inc.
  </description> <port protocol="tcp" port="9445"/></service>

Windows

Proceed as follows to configure the firewall on Microsoft Windows:

  1. Open the Command Prompt as Administrator.

  2. Run the following commands to allow the necessary port and ICMP and SMB rules:

netsh advfirewall firewall add rule name="FLROLR" dir=in action=allow protocol=TCP localport=9445

netsh advfirewall firewall add rule name="FLROLR" dir=out action=allow protocol=TCP localport=9445

netsh advfirewall firewall add rule name="ICMPV4" protocol=icmpv4:8,any dir=in action=allow

netsh advfirewall firewall set rule name="File and Printer Sharing (SMB-In)" dir=in new enable=Yes