At 8:43 PM -0600 7/13/07, Google Kreme wrote:
On 13-Jul-2007, at 14:23, Chris Pepper wrote:
At 1:13 PM -0600 2007/07/11, Google Kreme wrote:
On 11-Jul-2007, at 08:30, Daniel Farnworth wrote:
[backup]
Why not readonly? I prefer to allow as few other machines as
possible to *change* files, so would have each machine connect to
its partner and download the files to back up. This way any
outsiders who screw arround cannot change either machine's live
files -- just the backup.
Erm, they are not read only because that is what the server connects
to to send its files for backup.
But could you do it the other way? Have backup server B
connect to A::backup and read files from there? If the addressing and
firewalling are workable, you could have each backup server just read
from its peer, rather than writing.
I would also use "hosts allow" there to prevent random
Internet machines from connecting, or (better) use ipfw to
accomplish the same thing.
I also run some backups from my home connection, so that's not
really workable.
Even restricting it to your netblock would keep the riffraff out.
For extra bonus points, whip up an ssh private key and
restrict the matching public key to running the rsync 'server'
process in ~/.ssh/authorized_keys, but this is rather complicated.
I do that for ssh sessions, but never seen a need to jump through
the hoops for rsync.
Depends on your level of trust in the servers. I try hard to
minimize mine; it works in some cases, and not in others.
I think we're pretty far afield for BB-T, so I'm happy to
take this offline if you'd like to continue the discussion.
Chris
--
Chris Pepper: <http://www.reppep.com/~pepper/>
<http://www.extrapepperoni.com/>
The Rockefeller University: <http://www.rockefeller.edu/>
--
------------------------------------------------------------------
Have a feature request? Not sure the software's working correctly?
If so, please send mail to <[EMAIL PROTECTED]>, not to the list.
List FAQ: <http://www.barebones.com/support/lists/bbedit_talk.shtml>
List archives: <http://www.listsearch.com/BBEditTalk.lasso>
To unsubscribe, send mail to: <[EMAIL PROTECTED]>
