On Fri, Oct 25, 2002 at 11:42:52AM -0700, Jerry wrote:
> There is a firewall between my backup server and one
> of the hosts I want backup.

the most expedient method of getting to the host in our experience, is to
set up a VPN connection from the firewall to the machine you want to back
up. that way, you can put in a less restrictive set of rules between the
amanda client and amanda server, without fearing quite as badly for your
network integrity.

on the VPN interface:
allow <1024/UDP to 10080/UDP
allow >1024/TCP <-> >1024/TCP

this should let amanda traffic pass, but protect your low-port services
behind the firewall. 
apply other paranoia where possible, including taking down the VPN when you
don't need it.

Carl Soderstrom.
-- 
Systems Administrator
Real-Time Enterprises
www.real-time.com

Reply via email to