Amanda-Users

Re: Is it possible to configure amanda and inetd just for localho st?

2005-04-25 15:00:38
Subject: Re: Is it possible to configure amanda and inetd just for localho st?
From: Toomas Aas <toomas.aas AT raad.tartu DOT ee>
To: donald.ritchey AT exeloncorp DOT com, amanda-users AT amanda DOT org, vlad.popa AT sbg.ac DOT at
Date: Mon, 25 Apr 2005 21:46:51 +0300
donald.ritchey AT exeloncorp DOT com wrote:

Please review the Amanda archives for discussions of the pitfalls of using localhost as part of your backup configuration. This is a subject that has been beaten into submission quite thoroughly.

The short answer and general consensus from the Amanda community:

        Don't do it!!!

The original question had nothing to do with using 'localhost' as hostname in the disklist (which is indeed a bad idea).

Vlad simply wanted to know if he can restrict Amanda daemons so that they only accept connections from localhost. This is very good idea if the server is it's own only client - the less ports open to the network, the better.

One obvious way to achieve this is to use your favourite firewall package. It may be also possible to achieve this with the means of inetd (amanda services are started from there), but I'm not sure of that. Surely inetd documentation has the answer.