On Thursday 14 February 2002 12:21, Gene Matthews wrote:

> I am assuming I have to share the directories from the windows boxes
> that I want to backup, which would imply turning on file and print
> sharing, right?

That is correct.

> I always heard this was a big security hole.  Is there a secure way to
> do this?

Use a host based firwall like ZoneAlarm, it's free, and is a wonderfully 
simple IP filter. Also, password protect the shares on Win9x, or if it's 
2000/NT/XP, only allow certain users access (amanda can mount the share as 
one of the allowed users).

> My tape server is off site and i'm waiting on someone to switch tapes
> for me now.  Then I will test out what I have set up for now.
>
> amcheck seems to think all is well.  I have /etc/amandapass entries for
> the shares //windowsbox/C$.
>
> Can I use the C$ share for the entire drive/partition?  

I do on some 9x clients. They swap file always returns an error, but that's 
to be expected.

Any hints from
> someone backing up windows systems would be most appreciated. Some of
> the windows boxes I'm trying to backup have public IPs so I would like
> to have as much security as possible.

All my Windows PCs are on a public network. They all run ZoneAlarm. The 9x 
machines have full shares that are passwd protected. The NT/2000/XP PCs are 
joined to a domain that has a user named amanda. Only amanda can access the 
NT shares.
-- 
Brad

Reply via email to