The backup of the VM is done with Veeam Backup & Replication 9.5
During the restore, Veeam creates a temporary VM, boots it up and then you can selectively restore files to the destination machine.
VeeamBackup 9.5 - Restore Linux Files
Veeam uses ports 2500-5000 so I needed to open these ports on the firewall on the destination machine.
nmap nor netstat -tulpn helped me to see whether these ports were open or closed. Maybe I used the wrong parameters ...
We use the Linux Firewall "iptables", so I needed to add INPUT chains.
iptables config for VeeamBackup:
cat /etc/network/if-pre-up.d/iptables start this script to reload the firewall <<<<<<<<
#!/bin/sh /sbin/iptables-restore < /etc/iptables.up.rules
chmod +x /etc/network/if-pre-up.d/iptables
Edit file /etc/iptables.up.rules and add
# Needed for VeemBackup FLR restore files to linux -A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s xxx.xxx.xxx.xxx -j ACCEPT
# To be sure I added some other hosts which might be involved in the restore process -A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s 192.168.yyy.yyy -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s 192.168.zzz.zzz -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s 192.168.www.www -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s 192.168.uuu.uuu -j ACCEPT and reload the firewall: /etc/network/if-pre-up.d/iptables After making these changes, the restore worked !
see also:
https://helpcenter.veeam.com/docs/backup/vsphere/used_ports.html?ver=95#linux_servers
https://community.spiceworks.com/how_to/103485-configuring-a-veeam-linux-backup-repository