syn timeout linux client wont backup

[ess07]

We currently have 3 networker servers and 100's of clients. We currently have all sorts of clients (windows, linux, solaris, aix). Our currently legato installed is 7.4.4. We usually stay one version behind due to bugs. Recently we are trying to backup 2 new linux clients that are on vmware. WE backup other linux clients that are on vmware with no issues. However, on these 2, we cant seem to start a backup via the server through the scheduler. WE can manually backup from the client to the server but not the other way. We verified the firewall rules already, least we believe so. When we attempt to backup from the networker server, our network logs see the build ups and then we get a syn timeout. just like below:

Jun 19 10:28:03 150.142.1.19 %PIX-6-302013: Built outbound TCP connection 1394558414 for hcom:150.142.96.36/7938 (150.142.96.36/7938) to inside:150.142.4.47/35903 (150.142.4.47/35903)
Jun 19 10:28:03 150.142.1.19 %PIX-6-302020: Built inbound ICMP connection for faddr 150.142.96.36/0 gaddr 150.142.4.47/0 laddr 50.142.4.47/0
Jun 19 10:28:03 150.142.1.19 %PIX-6-302021: Teardown ICMP connection for faddr 150.142.96.36/0 gaddr 150.142.4.47/0 laddr 150.142.4.47/0
Jun 19 10:28:33 150.142.1.19 %PIX-6-302014: Teardown TCP connection 1394558414 for hcom:150.142.96.36/7938 to inside:150.142.4.47/35903 duration 0:00:30 bytes 0 SYN Timeout

I can telnet through the 7938 port from client to the server, but not the reverse. ie below:

# telnet appdev 7938
Trying 150.142.31.163...

but from appdev I am fine.

[root@appdev ~]# telnet stacker2 7938
Trying 192.168.14.75...
Connected to stacker2.health.state.ny.us (192.168.14.75).
Escape character is '^]'.
^]
telnet> quit


I have a case open with emc but at this moment in time, they are not being to helpful. Would anyone be willing to give me ideas on what i can check? Both linux clients are redhat 5. Any idea's would be greatly appreciated.

Thanks

 

[605]

Copy a client to a new group and run the group with more verbosity, like "savegrp -v -l full -G group".

Do not backup to much data in this test.

 

[ess07]

I have figured out the problem finally. Someone has gone back through and re-enabled the firewalls full blast. I was able to add in my ports and it was fine.