Re: [Bacula-users] bacula-sd behind NAT

2008-02-07 Thread Dan Langille
Vladimir Vasilev wrote:
 Hi folks
 
 Do anyone has a solution when the bacula server is behind NAT?  
 bacula_internal-dir tells public-fd to send data to bacula_internal-sd,  
 but bacula_internal-sd is on internat network (behind NAT). Can I tell the  
 SD to initialize the connection to the public-fd?
 
 Port fowarding, VPN tunelling, etc are plan B.

Create two Storage resources in bacula-dir.conf.  Given them different IP 
addresses, one public, one private.  Use the public one for clients 
outside.  Use the firewall to redirect the public IP address to the SD.

Point both Storage resources at the same SD.

Make sense?

-- 
Dan Langille - http://www.langille.org/
BSDCan - The Technical BSD Conference: http://www.bsdcan.org/
PGCon  - The PostgreSQL Conference:http://www.pgcon.org/

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] bacula-sd behind NAT

2008-02-07 Thread Dan Langille
Vladimir Vasilev wrote:
 Hi folks
 
 Do anyone has a solution when the bacula server is behind NAT?  
 bacula_internal-dir tells public-fd to send data to bacula_internal-sd,  
 but bacula_internal-sd is on internat network (behind NAT). Can I tell the  
 SD to initialize the connection to the public-fd?
 
 Port fowarding, VPN tunelling, etc are plan B.

Create two Storage resources in bacula-dir.conf.  Give them different IP 
addresses, one public, one private.  Use the public one for clients 
outside.  Use the firewall to redirect the public IP address to the SD.

Point both Storage resources at the same SD.

Make sense?

-- 
Dan Langille - http://www.langille.org/
BSDCan - The Technical BSD Conference: http://www.bsdcan.org/
PGCon  - The PostgreSQL Conference:http://www.pgcon.org/

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] bacula-sd behind NAT

2008-02-07 Thread Dan Langille
Vladimir Vasilev wrote:
 On Thu, 07 Feb 2008 15:50:28 +0200, Dan Langille [EMAIL PROTECTED] wrote:
 
 Vladimir Vasilev wrote:
 Hi folks
  Do anyone has a solution when the bacula server is behind NAT?   
 bacula_internal-dir tells public-fd to send data to  
 bacula_internal-sd,  but bacula_internal-sd is on internat network  
 (behind NAT). Can I tell the  SD to initialize the connection to the  
 public-fd?
  Port fowarding, VPN tunelling, etc are plan B.
 Create two Storage resources in bacula-dir.conf.  Give them different IP  
 addresses, one public, one private.  Use the public one for clients  
 outside.  Use the firewall to redirect the public IP address to the SD.

 Point both Storage resources at the same SD.

 Make sense?

 
 
 Well... not realy. I do not have a second public IP. I have one public ip  
 to the router and that is all. SD can only bind and use private IP.

Redirect incoming port X on the router to port X on the private IP.

This is also known as port forwarding.

-- 
Dan Langille - http://www.langille.org/
BSDCan - The Technical BSD Conference: http://www.bsdcan.org/
PGCon  - The PostgreSQL Conference:http://www.pgcon.org/

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] bacula-sd behind NAT

2008-02-07 Thread Vladimir Vasilev
On Thu, 07 Feb 2008 15:50:28 +0200, Dan Langille [EMAIL PROTECTED] wrote:

 Vladimir Vasilev wrote:
 Hi folks
  Do anyone has a solution when the bacula server is behind NAT?   
 bacula_internal-dir tells public-fd to send data to  
 bacula_internal-sd,  but bacula_internal-sd is on internat network  
 (behind NAT). Can I tell the  SD to initialize the connection to the  
 public-fd?
  Port fowarding, VPN tunelling, etc are plan B.

 Create two Storage resources in bacula-dir.conf.  Give them different IP  
 addresses, one public, one private.  Use the public one for clients  
 outside.  Use the firewall to redirect the public IP address to the SD.

 Point both Storage resources at the same SD.

 Make sense?



Well... not realy. I do not have a second public IP. I have one public ip  
to the router and that is all. SD can only bind and use private IP.

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] bacula-sd behind NAT

2008-02-07 Thread Thomas
Hi Vladimir

   Do anyone has a solution when the bacula server is behind NAT?

Do you have read the bacula firewall manual?

http://209.85.129.104/search?q=cache:qOEitbLB_x4J:www.bacula.org/dev-manual/Dealing_with_Firewalls.html+bacula+firewallhl=dect=clnkcd=1gl=chclient=firefox-a

 Do anyone has a solution when the bacula server is behind NAT?  
 bacula_internal-dir tells public-fd to send data to bacula_internal-sd,  
 but bacula_internal-sd is on internat network (behind NAT).

- configure port-forwarding on the NAT device 
- edit /etc/hosts to resolv internal storage daemon address to external (aka 
router) IP

That's how i do it.

- Thomas 



-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users