[ale] Iptables: Temporarily mounting a windows share
James P. Kinney III
jkinney at localnetsolutions.com
Mon Jan 16 16:43:39 EST 2006
On Mon, 2006-01-16 at 13:33 -0500, Jeff Hubbs wrote:
> My cleanest option for offloading backup tarballs from an
> Internet-reachable server involves dropping the tarballs onto a nearby
> Windows server that's already part of the backup rotation. My iptables
> rules preclude this at the moment.
>
> Instead of modifying my iptables script to allow me to "mount -t
> cifs..." from the server at any time, I'd prefer to have the backup
> script make the minimum necessary iptables rules changes temporarily,
> mount the windows share, write the tarballs to the mount point, unmount
> the windows share, and change the iptables rules back like they were.
> How might I invoke this in my backup script?
>
> Jeff
Since it can all be done in a shell script, create a run-before.sh that
does the firewall opening, mounts the drive, run the backup, then use
the complimentary run-after.sh the unmounts the drive and the closes the
iptables hole.
A secondary idea is to use rsync/ ssh with keys and cygwin (for rsync
support) on the windows machine. Then do a local tape backup of the
tarball. This will let you work without opening the firewall up any more
than allowing ssh.
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
--
James P. Kinney III \Changing the mobile computing world/
CEO & Director of Engineering \ one Linux user /
Local Net Solutions,LLC \ at a time. /
770-493-8244 \.___________________________./
http://www.localnetsolutions.com
GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
More information about the Ale
mailing list