-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hallo all,

many thanks for the extremely interesting discussions!

I think that for our use case, the ``SD Calls Client'' directive would
probably work best. Many thanks to the Bacula devs for adding it!

As for Josh's comment on potential security weaknesses due to spoofing the
Director: While that problems certainly exists, it is alleviated by the fact
that due to firewalling, the remote client outside of the firewall would
accept connections to the FD _only from the internal network_, making
spoofing a bit more difficult. Specifically, it would accept a connection
from a single SD host in the (hopefully) secure internal network, which also
has anti-spoofing rules in place.

Best,
  Andreas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlelxfcACgkQk5ta2EV7DozSlACePgbLa4CqAQiOu2uRD1eGurFs
eCoAn2HBDH6rD4KB1teJYFm4wfCn839y
=CqcW
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to