Fwd: Re: Backup of DMZ Servers

["Jonathan Feldman" <Jonathan () chathamcounty org>]

OTOH, if you can live without a shrink-wrapped package, there's always SSH (Outbound TCP/22) and homegrown scripts.  
Lots easier to do on Unix, but still, you can do it on NT with IIS.

Cheers,



--Jonathan

Jonathan Feldman
Chief Technical Manager, Chatham County ICS http://chathamcounty.org
Contributing Editor, Network Computing Magazine http://nwc.com
"Teach Yourself Network Troubleshooting"
"Network+ Exam Guide" http://feldman.org
> --- Begin Message ---
>
>
> From: "Jonathan Feldman" <Jonathan () chathamcounty org>
>
> Date: Thu, 31 May 2001 10:14:29 -0400
>
> I think they're all ugly.
>
> > From what I understand, an internal BackupExec server backing up an external server needs:
>
> Outgoing TCP 6101-6103 for backup query
> Outgoing 1024-65535 for backup data
>
> Clearly, for #2, you'll want to lock it down to the IP address of your backup server.  Not pretty however you slice it; 
> but at least BE doesn't require incoming stuff.
>
> Cheers,
>
>
>
> --Jonathan
>
> Jonathan Feldman
> Chief Technical Manager, Chatham County ICS http://chathamcounty.org
> Contributing Editor, Network Computing Magazine http://nwc.com
> "Teach Yourself Network Troubleshooting"
> "Network+ Exam Guide" http://feldman.org
>
> > > > "Hartmann, Josef" <hartmann () secunet de> 05/30/01 11:45AM >>>
> Hi,
>
> I just would like to ask people how do you backup your webservers (IIS)?
> Looking at a standard backup program Legato Networker I have to open quite
> many ports from the untrusted zone to the internal LAN (where the storage
> node resides).
>
> How about other backup solutions EDM, NetBackup?
>
> Personally I prefer using local tapes however people don't want to have the
> management of that.
>
>
> Thanks,
>
> Josef
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com 
> http://www.nfr.com/mailman/listinfo/firewall-wizards
>
>
> --- End Message ---