[ale] Iptables: Temporarily mounting a windows share

Joe Story joestory at bellsouth.net
Thu Jan 19 03:58:23 EST 2006


On Mon, 2006-01-16 at 16:43 -0500, James P. Kinney III wrote:
> On Mon, 2006-01-16 at 13:33 -0500, Jeff Hubbs wrote:
> > My cleanest option for offloading backup tarballs from an 
> > Internet-reachable server involves dropping the tarballs onto a nearby 
> > Windows server that's already part of the backup rotation.  My iptables 
> > rules preclude this at the moment.
> > 
> > Instead of modifying my iptables script to allow me to "mount -t 
> > cifs..." from the server at any time, I'd prefer to have the backup 
> > script make the minimum necessary iptables rules changes temporarily, 
> > mount the windows share, write the tarballs to the mount point, unmount 
> > the windows share, and change the iptables rules back like they were.   
> > How might I invoke this in my backup script?
> > 
> > Jeff
> 
> Since it can all be done in a shell script, create a run-before.sh that
> does the firewall opening, mounts the drive, run the backup, then use
> the complimentary run-after.sh the unmounts the drive and the closes the
> iptables hole.
> 
> A secondary idea is to use rsync/ ssh with keys and cygwin (for rsync
> support) on the windows machine. Then do a local tape backup of the
> tarball. This will let you work without opening the firewall up any more
> than allowing ssh.
> 

I agree with James on this.  I have set this up with a customer and a
server beach account.  Couldn't be more pleased.  

If you want to learn more about it.

http://servers.linux.com/servers/04/11/04/0346256.shtml?tid=119&tid=47



Joe-




> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://www.ale.org/mailman/listinfo/ale
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale




More information about the Ale mailing list