Re: [BackupPC-users] Remote Mgmt
2012-02-17 17:07:17
Your def right about front facing being a security issue. All I need it for is
to be able to dl a backed file remotely through the interface. How's setting up
a VPN sound?
On Feb 17, 2012, at 4:47 PM, Arnold Krille <arnold AT arnoldarts DOT de> wrote:
> On Friday 17 February 2012 13:02:07 Steve Willoughby wrote:
>> On 17-Feb-12 12:35, Les Mikesell wrote:
>>> On Fri, Feb 17, 2012 at 2:24 PM, Zach Lanich <zlanich AT gmail DOT com
>>> <mailto:zlanich AT gmail DOT com>> wrote:
>>> How do I access my backuppc interface from outside the local
>>> network? I have a webserver set up through isp config and I can get
>>> to my website I built but isp gives me a 500 error when i try to
>>> access backuppc.
>>>
>>> The packaged apache config probably restricts access to the local host.
>>> In the EPEL rpm that would be in /etc/httpd/conf.d/BackupPC.conf, but
>>> the ubuntu version might be somewhere else. If you can find it, change
>>> it to allow from all and restart apache (if you are sure you want to do
>>> that...).
>>
>> "If you are sure you want to do that..."
>>
>> Re-read Les' last sentence a few times and let it really sink in before
>> going further with this.
>>
>> BackupPC has essentially root-level access to all your backed-up
>> systems, and certainly has access to all their file data (and can
>> restore back onto them, probably).
>>
>> Do you *really* feel confident that the way you log in to BackupPC over
>> the web is secure? Using only HTTPS? Checking certificates properly?
>> Even with that, you're 100% sure your webserver can't be compromised
>> from the outside?
>>
>> If you really need this, perhaps a better thing to do would be to SSH in
>> to the host and set up a tunnel over that SSH connection to reach your
>> BackupPC server.
>
> Even if your apache and perl/cgi and backuppc is save from any hacking, is
> the
> rest of the system invincible too?
> Do you really want to save your backups of crucial machines on hardware
> physically controlled by someone else?
>
> It is less of a problem when its data from servers in the same third-party-
> operated datacenter. But when the data housed inside your business goes
> outside for backups, you should really make sure all is save. And with
> backuppc its not only the data itself, but also the access to the backed-up
> machines.
>
> Have fun,
>
> Arnold
> ------------------------------------------------------------------------------
> Virtualization & Cloud Management Using Capacity Planning
> Cloud computing makes use of virtualization - but cloud computing
> also focuses on allowing computing to be delivered as a service.
> http://www.accelacomm.com/jaw/sfnl/114/51521223/
> _______________________________________________
> BackupPC-users mailing list
> BackupPC-users AT lists.sourceforge DOT net
> List: https://lists.sourceforge.net/lists/listinfo/backuppc-users
> Wiki: http://backuppc.wiki.sourceforge.net
> Project: http://backuppc.sourceforge.net/
------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List: https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki: http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
|
|
|