On 30 May 2005 at 15:36, Matthias Vogt wrote:

> Hi,
> 
> I solved the problem finally this way. The solution ist Bacula version
> independent. A backup job conversation goes like this
> 
> 1. DIR tells SD to accept data from the FD
> 2. DIR tells FD which SD (and address) to use
> 3. FD starts sending data to the SD address.
> 
> In the case that your client is behind a firewall, you have to set the
> firewall's address in an additional storage object in bacula-dir.conf.
> In my case
> 
> Storage {
>   Name = "TapeStorage external"    
>   Address = firewall.w-commerce.de                
>   SDPort = 9103
>   Password = "....."          
>   Device = HP-Ultrium2                      
>   Media Type = LTO                 
> }
> 
> Next, setup up your firewall. Ensure that it does DNAT from the
> external firewall IP to your internal SD IP on port 9103. If you run a
> backup job, DIR tries to connect to SD IP, in my case
> firewall.w-commerce.de. At this point the backup fails because DIR
> can't connect to SD. 
> 
> Now the trick, append an additional DNAT rule in the OUTPUT-Chain at
> your DIR-Server, which should do a DNAT to your SD-Server if the
> destination address is your firewall and the destination port 9103. In
> my case:
> 
> # iptables -A OUTPUT -t nat -t tcp -d firewall.w-commerce.de --dport
> # 9103 -j DNAT --to-destination 192.168.66.150.
> 
> Now I can backup my external clients :-)

I've been doing this a slightly different way.

I create two SD resources.  One for the internal IP address 
(10.0.0.*) and one for the external IP address (i.e. my gateway).  
Remote (external) clients use the latter address. Local clients use 
the 10.0.0.* address.

This URL shows a bit more:
http://article.gmane.org/gmane.comp.sysutils.backup.bacula.general/251
3
-- 
Dan Langille : http://www.langille.org/
BSDCan - The Technical BSD Conference - http://www.bsdcan.org/




-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to