John, With a standard configuration, the systems on a PROT network can access anything on the DMZ (or PSN), unless of course you have restrictions in place that you have imposed (I know I tighten down the allowed IP / port range to stop IM, Shoutcast, etc, etc).
I have no experience of Legato Networker, but I believe you *should* be able to have a relationship between the PROT and DMZ (PSN) by just allowing an IP:PORT one to many relationship between the server on the PROT to an Object:Address List or range on the DMZ (PSN) without resorting to a pass-through. I use the open source backup mechanism AMANDA (hacked a bit to be sure) to do exactly this - and it works very well. The only reason I can see that it would have to be bi-directional is if the clients on the DMZ (PSN) have to do the initialisation - which might scupper such an arrangement. Best Regards, Steve Leach IT/Network Manager MI International Limited e-mail: [EMAIL PROTECTED] www: http://www.mi-int.com ----- Original Message ----- From: "Rumball, John" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 26, 2002 9:38 PM Subject: [gb-users] Backup of PSN from protected network > Hello and thanks for reading this post. > > I am trying to properly configure IP Pass Through to allow a backup server > (running Legato Networker) on my protected network to backup various servers > on my PSN. I have tried various versions of the host/network and > pass-through filter definitions but I just can't seem to get it right. I > have checked the manual but I remain a bit confused about the whole thing. > > Would someone be kind enough to illustrate an example of how to set this up? > I'd really appreciate that. BTW, I am currently running GB-Pro v3.2.4. > > Many thanks. > > > John Rumball, CCNA > Sudbury Regional Hospital > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > To subscribe to the digest version first unsubscribe, then > e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > Archive of the last 1000 messages: > http://www.mail-archive.com/[email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected]
