Firewall-1

Re: [FW-1] Problems with scheduled backup in secure platform

Subject: Re: [FW-1] Problems with scheduled backup in secure platform
From: RoNNY <ronnynussbaum AT GMAIL DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 24 Nov 2005 21:38:15 -0500
You can still use TFTP without the limitation if you use this:
http://tftpd32.jounin.net/
Free.

I have backups that are >32MB with it.

-RoNNY


On 11/24/05, Kruger P (CJD Almelo) <p.kruger AT cjd DOT nl> wrote:
>
> I would like to schedule backups from our configuration on cp ng secure
> platform (via secure web interface), but cannot get this scheduled task to
> work properly.
>
> In the past I've configured (Solarwinds) tftp server to use tftp as our
> backup option. Everything seemed to work fine, but it occured to me that
> all
> files ended up the size of 32Mb. Investigation (google) learned that a
> default limit of 32Mb with TFTP is available (on 32-bits with a word of 16
> bits giving default block size 512 * 65535=32Mb)and all our backups ended
> with this maximum size, but were corrupted.
>
> I started experimenting with scp. Installed openssh on our Windows server
> where the backups should be dropped and when clicking on manual backup in
> the gui I can make succesfull backups. When however I try to schedule the
> backups, the backup fails with the message in our Windows event log":
> "sshd
> : PID 28860 : Failed password for cpbackup from 10.41.232.1 port 10209
> ssh2". This even happens if I use the command line syntax from our
> firewall
> module. I am absolutely sure that the passwords I use are correctly. I use
> the same information in the web gui for the schedule option and for the
> manual backup option and the manual backup does work with that same
> password. All scheduled backups fail however and I don't know where to
> look
> now.
>
> Due to the limit of default TFTP I see three alternatives:
>
> 1. make my backup manual everytime from webgui with scp (not my favorite
> option)
> 2. Use a tftp server that is able to change blocksize (only know
> commercial
> variant which is expensive for this single purpose).
> 3. solve my scp problem (my favorite option)
>   This scheduling is a Checkpoint given option that in my opinion should
> work and I'm wondering if I'm the only one having this problem.
>
> Any help would be appreciated very much.
>
> Peter Kruger
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>