-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hallo all,
many thanks for the extremely interesting discussions!
I think that for our use case, the ``SD Calls Client'' directive would
probably work best. Many thanks to the Bacula devs for adding it!
As for Josh's comment on potential security weaknesses due to spoofing the
Director: While that problems certainly exists, it is alleviated by the fact
that due to firewalling, the remote client outside of the firewall would
accept connections to the FD _only from the internal network_, making
spoofing a bit more difficult. Specifically, it would accept a connection
from a single SD host in the (hopefully) secure internal network, which also
has anti-spoofing rules in place.
Best,
Andreas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAlelxfcACgkQk5ta2EV7DozSlACePgbLa4CqAQiOu2uRD1eGurFs
eCoAn2HBDH6rD4KB1teJYFm4wfCn839y
=CqcW
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users
|