BackupPC-users

Re: [BackupPC-users] How to backup a laptop over internet

2017-05-30 15:18:25
Subject: Re: [BackupPC-users] How to backup a laptop over internet
From: Holger Parplies <wbppc AT parplies DOT de>
To: "General list for user discussion, questions and support" <backuppc-users AT lists.sourceforge DOT net>
Date: Tue, 30 May 2017 21:18:12 +0200
Hi,

Xuo wrote on 2017-05-30 19:03:03 +0200 [Re: [BackupPC-users] How to backup a 
laptop over internet]:
> I'm using BackupPC 3.3.0 (got from the Web gui).
> Yes this feature would be really great (at least for me !!).

sorry, really busy, two quick remarks:
Can't be too difficult to backport "this feature" (context = array argument
to ClientNameAlias possible) to 3.3.0. Supposing I find the time before
someone else does, I'd look at it ...

> Thank you to all for your help. I'm still fighting with the vpn
> connection. I'll tell you if I succeed (one day) to backup through
> this f... vpn connection.
> vpn + nice feature => king of the world.

You *can* use a VPN locally, too. That way, you'd be reachable via the same
address in both cases (plus a local one if you're on the local net; probably
faster for non-BackupPC traffic). Routing might be a little tricky. You'd
probably need to NAT to the VPN gateway address for connections from the LAN
to your notebook (via the VPN address) - something along the lines of

  iptables -t nat -A POSTROUTING -o tun0 -d 1.2.3.4 -j SNAT --to-source 1.2.3.1

(replace tun0 with the VPN device name, 1.2.3.4 with the notebook VPN address
and 1.2.3.1 with the VPN gateway VPN address). You'll also need to prevent
routing to your local subnet via the VPN when you're on the local subnet
(which OpenVPN with "push route ..." would do, for instance).

Or you could DNAT connections to the VPN address to the local address when
the VPN isn't connected (that's a DNAT in PREROUTING *and* an SNAT in
POSTROUTING, because you need to catch the return packets).

Requires some networking skills and possibly some experimentation, but it
can definitely be done. The ClientNameAddress variant is easier to implement
without doubt, but the VPN variant is more generic, i.e. it doesn't require
<whatever application> to be able to handle multiple addresses.

If you need help with routing or firewall rules, feel free to contact me
off-list (hopefully, my MTA will behave ...), and I'll try to respond soon.

Regards,
Holger

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


ADSM.ORG Privacy and Data Security by KimLaw, PLLC