13 December 2017

Veeam Backup 9.5 :& Restore Linux Files

This week I had to restore some files on a (Turnkey) Linux Virtual Machine (VM) on VMware.

The backup of the VM is done with Veeam Backup & Replication 9.5

During the restore, Veeam creates a temporary VM, boots it up and then you can selectively restore files to the destination machine.

VeeamBackup 9.5 - Restore Linux Files

Veeam uses ports 2500-5000 so I needed to open these ports on the firewall on the destination machine.

nmap nor netstat -tulpn helped me to see whether these ports were open or closed. Maybe I used the wrong parameters ...

We use the Linux Firewall "iptables", so I needed to add INPUT chains.

iptables config for VeeamBackup:


cat /etc/network/if-pre-up.d/iptables  start this script to reload the firewall <<<<<<<<
  
    #!/bin/sh  
    /sbin/iptables-restore < /etc/iptables.up.rules  

chmod +x /etc/network/if-pre-up.d/iptables

Edit file /etc/iptables.up.rules and add

# Needed for VeemBackup  FLR restore files to linux  
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s xxx.xxx.xxx.xxx -j ACCEPT
# To be sure I added some other hosts which might be involved in the restore process  
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s 192.168.yyy.yyy -j ACCEPT  
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s 192.168.zzz.zzz -j ACCEPT  
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s 192.168.www.www -j ACCEPT  
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2500:5000 -s 192.168.uuu.uuu -j ACCEPT  


and reload the firewall:
/etc/network/if-pre-up.d/iptables
After making these changes, the restore worked !


see also:
https://helpcenter.veeam.com/docs/backup/vsphere/used_ports.html?ver=95#linux_servers
https://community.spiceworks.com/how_to/103485-configuring-a-veeam-linux-backup-repository