[ale] Iptables: Temporarily mounting a windows share

Jeff Hubbs hbbs at comcast.net
Mon Jan 16 15:06:09 EST 2006


That's pretty much the plan - it's the "..." after "iptables -I" that 
I'm concerned about.

- Jeff

Joe Steele wrote:

>Sounds like you want to do something like this:
>
># save your existing rules
>iptables-save  > original-rules
># Add additional rules needed for mounting the share:
>iptables -I ...
>. . .
># mount the share
>mount -t cifs ...
># copy your files
>. . .
># umount
>. . .
># Restore the original firewall
>iptables-restore < original-rules
>
>--Joe
> 
>
>Jeff Hubbs wrote:
>  
>
>>My cleanest option for offloading backup tarballs from an 
>>Internet-reachable server involves dropping the tarballs onto a nearby 
>>Windows server that's already part of the backup rotation.  My iptables 
>>rules preclude this at the moment.
>>
>>Instead of modifying my iptables script to allow me to "mount -t 
>>cifs..." from the server at any time, I'd prefer to have the backup 
>>script make the minimum necessary iptables rules changes temporarily, 
>>mount the windows share, write the tarballs to the mount point, unmount 
>>the windows share, and change the iptables rules back like they were.   
>>How might I invoke this in my backup script?
>>
>>Jeff
>>    
>>
>_______________________________________________
>Ale mailing list
>Ale at ale.org
>http://www.ale.org/mailman/listinfo/ale
>
>  
>




More information about the Ale mailing list