[lug] Backup system ideas

[Nate Duehr]

Ben Luey wrote:
> I've been looking at dirvish, (thanks for the info) and it looks really
> cool as a backup system. I wondering about security, though: the howto
> suggests using ssh keys so the backup computer can login to the main
> computer *as root* without a password and then you can cron the dirvish
> backup on the backup-computer. This strikes me as a bad idea since then if
> someone hacks the backup server, they have full access to the main server.
> Is there a way around this? I've been compressing my data on the main

<snip>

My backup server is inside the firewall and has no external connections, 
so it goes out throught the firewall to the public machines from a NAT 
address through the firewall.  Seems like that's the simplest solution 
-- don't do the backups from a machine that's publically accessible.

Nate