Bacula-users

Re: [Bacula-users] Backup of system outside of restrictive firewall?

2016-08-06 07:13:06
Subject: Re: [Bacula-users] Backup of system outside of restrictive firewall?
From: Andreas Koch <koch AT esa.informatik.tu-darmstadt DOT de>
To: Bacula Users <bacula-users AT lists.sourceforge DOT net>
Date: Sat, 6 Aug 2016 13:11:51 +0200
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hallo all,

many thanks for the extremely interesting discussions!

I think that for our use case, the ``SD Calls Client'' directive would
probably work best. Many thanks to the Bacula devs for adding it!

As for Josh's comment on potential security weaknesses due to spoofing the
Director: While that problems certainly exists, it is alleviated by the fact
that due to firewalling, the remote client outside of the firewall would
accept connections to the FD _only from the internal network_, making
spoofing a bit more difficult. Specifically, it would accept a connection
from a single SD host in the (hopefully) secure internal network, which also
has anti-spoofing rules in place.

Best,
  Andreas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlelxfcACgkQk5ta2EV7DozSlACePgbLa4CqAQiOu2uRD1eGurFs
eCoAn2HBDH6rD4KB1teJYFm4wfCn839y
=CqcW
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users