Wilson, David wrote: > Greetings, > Howdy
> I am looking for a way to control backups for hosts located inside of a > firewall. These hosts are on a private non-routable address space and > NAT'd through a firewall. > > My director and storage daemon are located in my normal server space and > have no problems backing up other hosts. > > I would like to know if there is a way to setup a host behind the > firewall to kick of backups against my clients within this network and > have them backup to my storage daemon located on the "public" side of > the firewall. Ideally if there was a proxy bacula director with which I > could place within this private space and only grant my director access > to which then would kick off backups to hosts within the private network > it would be perfect. > > Has anyone else run into an issue similar to this and how did they solve > it. I do not want to open access from my director to each host behind > the firewall, and I would like to use the same volumes I would normally > use for backups. I think we have the same issue. We have Bacula behind our PIX and we have a client requesting backups and he is behind another FW (brand unknown). We are looking to setup each of his clients on separate ports and use portmapping to send my director to the correct client fd. Bob's IX is at ip 111.222.333.444 bob-a-fd ip = 192.168.10.2 port = 45913 bob-b-fd ip = 192.168.10.4 port = 45923 bob-c-fd ip = 192.168.10.22 port = 45933 If my director connects to 111.222.333.444 and port 45913 he should get bob-a-fd, providing we mapped it correctly. If his FW accepts connections from my PIX only, and only on ports 45913-45933 I think it should work. Of course I will have to open up my PIX to traffic from his FW, at least to my director and my storage boxes. Sound right? DAve -- Three years now I've asked Google why they don't have a logo change for Memorial Day. Why do they choose to do logos for other non-international holidays, but nothing for Veterans? Maybe they forgot who made that choice possible. ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
