Problem

When adding a new Linux media server, backups will fail with error 811 if iptables are not properly configured for pbx on a Linux media server.

Error

The logs will show that the media server will receive the initial commmunication, but then will rec media server bptm process shows that we're using ORB NB_945_767679512 for this resource connection back to the master server:
20:09:12.867 [945] <2> nbjm_media_request: Passing job control to NBJM, type WRITE/1 20:09:12.867 [945] <2> nbjm_media_request: old_media_id = , media_id = NULL 20:09:12.867 [945] <2> RequestInitialResources: starting 20:09:12.868 [945] <2> Orb::init: Created anon service name: NB_945_767679512(Orb.cpp:612) 20:09:12.868 [945] <2> Orb::init: endpointvalue is : pbxiop://1556:NB_945_767679512(Orb.cpp:630)

The master server nbjm process shows the receipt of the connection:
11/10/2011 15:09:12.901 PBXIOP_Connector::make_connection, to <[10.1.2.3]:1556:NB_945_767679512>

Then the failure:

11/10/2011 15:09:33.886 PBXIOP_Connector::make_connection, connection to <new-media.fqdn.net:1556:NB_945_767679512> failed (errno: A socket operation was attempted to an unreachable host. )

Cause

Wireshark, sniffer, snoop or some other network monitoring tool can be used to monitor the connectivity between the master and media server. If iptables isn't correctly configured to use pbx, the network monitoring tool will show an error similar to the following: "Destination unreachble (Host administratively prohibited)"

Solution

Check the /etc/sysconfig/iptables file to ensure that pbx is properly configured in the file. If using vnetd, that port (13724) should also be enabled. After any modifications are made to the /etc/sysconfig/iptables file are made, the iptables service should be stopped and restarted:
/sbin/service iptables stop /sbin/service iptables start