I made the additional changes you suggested.

*Removed FD port open on remote router
*Set storage resource 'Address=<local address of SD host>'
*Set storage resource 'FDStorageAddress=<public FQDN of remote site>'

I re-tested local and remote backups and these seem to be working fine.

These changes were not absolutely required as local backups continued to
work when I had storage resource 'Address=<public FQDN of remote site>' and
without the 'FDStorageAddress=' directive. I presume this was because I had
opened ports 9101-9103 to the DIR/SD host on the local router as part of my
previous attempts and I haven't undone any of them.

Thanks for your help

-Chris-

On Wed, 26 Jun 2024, 22:50 Bill Arlofski, <w...@protonmail.com> wrote:

> On 6/26/24 3:31 PM, Chris Wilkinson wrote:
>  >
> > Your tips were bang on. I implemented this and it is working.
>
> Excellent!  \o/
>
>
> > The other steps required were to forward ports on the routers at each
> end
>
> This should not be necessary at the remote site(s). The remote clients
> will be making outbound calls to the Internet, unless
> you have NAT inside NAT or something "interesting" going on at the remote
> site(s).  :)
>
>
>  > and change the DIR storage resource Address= from a local lan address
> to the public FQDN.
>
> Uff yes, sorry, I missed a step!  :)
>
>
> The part I missed (which you solved differently, but not the best way if
> this Storage is needed to be used by other internal
> Clients) is to instead leave the SD's `Address = ` alone and set the
> `FDStorageAddress = <FQDN or IP of your Main site
> firewall>` in the Director's configuration resource for this (and any
> other external) Clients.
>
> This way, all your normal internal backups/clients that use this same SD
> can conn
> ect to it using its normal `Address = <SD's
> internal IP or FQDN>` and only these external clients will have the
> FDStorageAddress set to connect to the Main site's
> external firewall IP or FQDN.
>
>
> > Thank you.
> >
> > -Chris-
>
> You're welcome!
>
> Hope these additional tips help to clean things up even more.
>
> Best regards,
> Bill
>
> --
> Bill Arlofski
> w...@protonmail.com
>
>
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to