Secure backup subnetting?

[derek at cerberus.ne.mediaone.net (Derek Martin)]

Today, John Abreau gleaned this insight:

> We're trying to set up a Veritas backup system, and it's been suggested
> that we add an additional network card to each host to create an extra LAN
> for the backups. I'm concerned because this will bypass out firewall.
> However, one of the reasons we need to do this is that the existing
> Veritas setup is apparently overloading the firewall, and the backup
> processes lose their connections and abort when this happens.

Errr... you're backing up stuff through a firewall?  I don't know anything
about your setup, but that sounds like a really bad idea in general...

I would look at finding a way to back up those systems that doesn't
involve going through a firewall.  

Adding a second NIC doesn't seem like it should circumvent your firewall
either, you just create a seperate private LAN that only those
machines belong to.  Connect them via a switch.  No firewall.


-- 
---------------------------------------------------------------
Derek D. Martin              |  Unix/Linux Geek
ddm at MissionCriticalLinux.com |  derek at cerberus.ne.mediaone.net
---------------------------------------------------------------


-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).