Dave wrote:
> Hello,
> I'm trying to implement cross-internet bacula backups. And i'm trying
> to keep this as simple as i can. All servers and clients are running
> freebsd and bacula 1.38.5 via ports. On the client box which has a
> public IP address i've got bacula-fd running and port 9102 open from the
> firewall. I can telnet from my natted bacula backup server to the
> client's port 9102, so i believe this part is correct. My problem is the
> natted bacula backup server has a private 192.168.x.x IP and an internal
> domain name. It's gateway box does have a public address. My question is
> how do i reference this natted backup server in the client's
> bacula-fd.conf? I'm next going to implement ssl encryption to secure the
> data.
The issue here is that it's not enough for the Director to be able to
resolve the SD's IP. The SD must also be able to resolve the FD's IP
and connect to it. For this reason as well as because bacula's
transport is not currently encrypted, the RECOMMENDED method of backing
up a client outside a firewall from a server inside a firewall and
behind NAT is to have the server open a secure tunnel to the client
using stunnel or some similar tool, across which all communication
between the client and server is then tunnelled.
There is a section on doing this, with examples (if I recall correctly),
in the documentation. Your first step should probably be to go study it.
--
Phil Stracchino [EMAIL PROTECTED]
Renaissance Man, Unix generalist, Perl hacker
Mobile: 603-216-7037 Landline: 603-886-3518
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
