Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #179175
| From | David Christensen <dpchrist@holgerdanske.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Guide(s?) to backup philosophies |
| Date | 2017-03-23 04:00 +0100 |
| Message-ID | <to18J-49M-5@gated-at.bofh.it> (permalink) |
| References | (2 earlier) <tkxJU-Fd-21@gated-at.bofh.it> <tkLMR-2GV-3@gated-at.bofh.it> <tlXCi-535-7@gated-at.bofh.it> <tmeWt-1mc-1@gated-at.bofh.it> <tnM02-11I-27@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On 03/22/2017 03:35 AM, Dan Purgert wrote: > David Christensen wrote: >> On 03/17/2017 03:31 AM, Dan Purgert wrote: >>> David Christensen wrote: >>>> On 03/13/2017 05:38 AM, Dan Purgert wrote: >>>> [...] >> >> I should clarify that: >> >> "The backup server can be firewalled with no incoming ports and >> outgoing ports limited to SSH and other required ports". >> >> >> I still need to figure out the "other required outgoing ports". >> Suggestions and comments are welcome. > > Unfortunately, pretty much "all ephemeral ports", if the server is > running things that initiate connections. Some programs allow you to > specify what ports they're connecting from, but not all. I run ntpd on all my machines. So, ports 123/tcp and 123/udp need to be open for ongoing connections: 2017-03-22 19:30:03 dpchrist@jesse ~ $ grep ^ntp /etc/services ntp 123/tcp ntp 123/udp # Network Time Protocol >>> Since the PCs are laptops, they're not always here, so I was never able >>> to figure out how to get pull to work with the condition that we were on >>> vacation (or the laptops were otherwise "not home"). >>> >>> Though, yeah, the stuff that's statically here (desktop, server, etc.) >>> are rsync-by-pull. >> >> I haven't dealt with the "roaming laptop on the Internet" use-case yet, >> but I do have a desire to solve it. My idea has been, and remains, for >> the backup server to poll for a "job file" on the laptop, and to execute >> it when found (once; idempotent). This implies a network connection >> between the backup server and the laptop. OpenVPN is a technology that >> might be able to facilitate this. > > VPN could work, but SSH into a jumpbox works just as well. > > The push script checks /etc/resolv.conf for the local domain, if it's > mine, then backup to the backup-server directly. > > If it's not mine, backup "critical files" to the jumpbox (which, in turn > is backed up to the backup-server). It's quite a bit smaller than the > full backups that're performed at home - just $HOME/vacation. So, you have a static IP (or dynamic DNS) for your home Internet connection, you have your home gateway configured to allow incoming SSH connections and direct them to an internal host "jumpbox", and your laptop has a backup script that detects whether the laptop is on your LAN or on the Internet. If on the LAN, the backup script exits and waits for the backup server to pull a complete backup. If on the Internet, the backup script pushes critical files over SSH to a receiving directory on "jumpbox" (?). > SSH with key-auth only is plenty secure, and so far has never been one > of those things that've been blocked at a hotel. I have recently been studying up on SSH, both STFW and: https://www.michaelwlucas.com/tools/ssh SSH user keys with passphrases, disabling PasswordAuthentication, and ssh-agent/ssh-add are all good practices. David
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Guide(s?) to backup philosophies Richard Owlett <rowlett@cloud85.net> - 2017-03-11 16:20 +0100
Re: Guide(s?) to backup philosophies David Christensen <dpchrist@holgerdanske.com> - 2017-03-11 22:10 +0100
Re: Guide(s?) to backup philosophies Dan Purgert <dan@djph.net> - 2017-03-13 14:00 +0100
Re: Guide(s?) to backup philosophies David Christensen <dpchrist@holgerdanske.com> - 2017-03-14 05:00 +0100
Re: Guide(s?) to backup philosophies Dan Purgert <dan@djph.net> - 2017-03-17 11:50 +0100
Re: Guide(s?) to backup philosophies Glenn English <ghe2001@gmail.com> - 2017-03-17 19:50 +0100
Re: Guide(s?) to backup philosophies David Christensen <dpchrist@holgerdanske.com> - 2017-03-18 06:20 +0100
Re: Guide(s?) to backup philosophies Dan Purgert <dan@djph.net> - 2017-03-22 11:50 +0100
Re: Guide(s?) to backup philosophies <tomas@tuxteam.de> - 2017-03-22 11:50 +0100
Re: Guide(s?) to backup philosophies Dan Purgert <dan@djph.net> - 2017-03-22 13:20 +0100
Re: Guide(s?) to backup philosophies <tomas@tuxteam.de> - 2017-03-22 13:30 +0100
Re: Guide(s?) to backup philosophies Dan Purgert <dan@djph.net> - 2017-03-23 10:30 +0100
Re: Guide(s?) to backup philosophies <tomas@tuxteam.de> - 2017-03-23 11:10 +0100
Re: Guide(s?) to backup philosophies Dan Purgert <dan@djph.net> - 2017-03-23 13:10 +0100
Re: Guide(s?) to backup philosophies David Christensen <dpchrist@holgerdanske.com> - 2017-03-23 04:00 +0100
Re: Guide(s?) to backup philosophies Dan Purgert <dan@djph.net> - 2017-03-23 10:40 +0100
Re: Guide(s?) to backup philosophies David Christensen <dpchrist@holgerdanske.com> - 2017-03-23 20:10 +0100
Re: should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) Dominik George <nik@naturalnet.de> - 2017-03-31 14:10 +0200
Re: should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) Dominik George <nik@naturalnet.de> - 2017-03-31 23:20 +0200
Re: should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) Nathan Dorfman <ndorf@rtfm.net> - 2017-04-01 11:00 +0200
should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) cbannister@slingshot.co.nz - 2017-03-31 14:10 +0200
Re: should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) <tomas@tuxteam.de> - 2017-03-31 14:20 +0200
Re: should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) Brian <ad44@cityscape.co.uk> - 2017-03-31 15:20 +0200
Re: should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) <tomas@tuxteam.de> - 2017-03-31 15:30 +0200
Re: should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) Dominik George <nik@naturalnet.de> - 2017-03-31 15:30 +0200
Re: should I firewall an open port which isn't used? (was ... Re: Guide(s?) to backup philosophies) Dominik George <nik@naturalnet.de> - 2017-03-31 15:50 +0200
Re: Guide(s?) to backup philosophies Glenn English <ghe2001@gmail.com> - 2017-03-14 19:00 +0100
Re: Guide(s?) to backup philosophies Dan Ritter <dsr@randomstring.org> - 2017-03-14 19:20 +0100
Re: Guide(s?) to backup philosophies Miles Fidelman <mfidelman@meetinghouse.net> - 2017-03-14 20:20 +0100
Re: Guide(s?) to backup philosophies Dan Ritter <dsr@randomstring.org> - 2017-03-14 21:40 +0100
Re: Guide(s?) to backup philosophies Stefan Monnier <monnier@iro.umontreal.ca> - 2017-03-15 13:30 +0100
Re: Guide(s?) to backup philosophies Dan Ritter <dsr@randomstring.org> - 2017-03-15 14:10 +0100
Re: Guide(s?) to backup philosophies "Martin McCormick" <martin.m@suddenlink.net> - 2017-03-15 14:30 +0100
Re: Guide(s?) to backup philosophies Jonathan Dowland <jmtd@debian.org> - 2017-03-15 16:40 +0100
Re: Guide(s?) to backup philosophies Jonathan Dowland <jmtd@debian.org> - 2017-03-15 16:40 +0100
Re: Guide(s?) to backup philosophies Stefan Monnier <monnier@iro.umontreal.ca> - 2017-03-15 21:50 +0100
Re: Guide(s?) to backup philosophies songbird <songbird@anthive.com> - 2017-03-16 23:50 +0100
Re: Guide(s?) to backup philosophies Miles Fidelman <mfidelman@meetinghouse.net> - 2017-03-14 20:10 +0100
Re: Guide(s?) to backup philosophies Joe <joe@jretrading.com> - 2017-03-11 23:30 +0100
Re: Guide(s?) to backup philosophies Jonathan Dowland <jmtd@debian.org> - 2017-03-15 13:30 +0100
Re: Guide(s?) to backup philosophies Dan Ritter <dsr@randomstring.org> - 2017-03-13 15:20 +0100
Re: Guide(s?) to backup philosophies David Christensen <dpchrist@holgerdanske.com> - 2017-03-14 05:10 +0100
Re: Guide(s?) to backup philosophies Richard Owlett <rowlett@cloud85.net> - 2017-03-14 15:50 +0100
Re: Guide(s?) to backup philosophies Merlin Büge <toni@bluenox07.de> - 2017-03-14 19:50 +0100
Re: Guide(s?) to backup philosophies DdB <debianlist@potentially-spam.de-bruyn.de> - 2017-03-19 11:40 +0100
csiph-web