Page 1 of 1

Automatic Off-side Backup Via VPN and encrypted container

Posted: 13 Nov 2016 18:56
by FEAR-40
Dear All ,

I have a NAS4Free Version 9.0.1 Sandstorm installed on a Dual-Core CPU E6500 with 4GB or Ram , I have a simple samba server with severs users that backup there Data on it , and I would like to know if there is an easy way to create an off-side backup with OpenVpn and Some sort of Encrypting software , It's a long shot but still I would like to have this sense of "security" , this is for home use stuff and not a company is just I like to see if the concept can work in any way :) or is easy to implement ,

I don't know if there are off the shelf software that can do exactly what i ask so , I looked around in the etc file path in my web Gui and i didn't find a Cron.Hourly or Cron.dayly folder in order to just write a small batch script that can do all of these at a specific time ,

Lastly I wan't to do this so that I can apply the unwritten rule of computing " if your data does not exist in 3 locations or more , frankly it does not exist "

So I would like you to Enlighten me with this Task that I have at hand :)

to recap .: VPN to an other Nas4free or another network attached storage , Encryption from one side(local) send the encrypted data(to remote site) ... decrypt them at arrival (remote), verify them somehow , close the connection

Thank you in advance

Fear-40

p.s: I didn't update to the new software (10.3.0.3.3105) version because if something works don't f&&& with it :D an other rule to live by

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 13 Nov 2016 22:50
by MikeMac
FEAR-40 wrote: an easy way to create an off-side backup with OpenVpn and Some sort of Encrypting software
There is zfs send- receive feature. zfs send dataset or snapshot difference to a stream. It is alike of incremental backup in case of snapshot difference. Then, you could use pipe to transfer the stream. For example enscripted ssh. Or unenscripted netcat. Both are implemented in undermentioned script.

Then on receiver side zfs receive reconstructs stream back to filesystem.

My old post abt it is in Russian, sorry. But I hope google translation is understandable.
https://translate.google.ru/translate?s ... edit-text=

Please pay attention, that translator could corrupt *nix commands, so use for copy-paste only original untranslated text.

Idea of the script is quite simple. You invoke one on source machine. Script connects with target (backup) machine by ssh, invoke zfs receive here, check if older version of dataset exists/ If yes, only difference tranferred by enscripted or non enscripted protocol. If no - whole dataset.

The script need IP address of target NAS. This should not be a problem if you have VPN established.

Of course, there are a lot more (and definetelly better) solutions then this.

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 13 Nov 2016 23:12
by FEAR-40
Dear MikeMac

I don't want to have a solution that I am restrained to use only Nas4Free I would like to just have the flexibility to use any Computer share to just transfer the data though ,Like I have a router that Has a share server on it i can just have a USB hard-drive and do the same thing :D or a computer constantly being On and have the same Flexibility ,

and I don't Use ZFS :D I just have 2 drives with raid 0 for redundancy , nothing else ... :)

If you have any other idea I would be Grateful ,

Thank you in Advance

FEAR-40

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 14 Nov 2016 10:23
by ChriZathens
FEAR-40 wrote:I just have 2 drives with raid 0 for redundancy , nothing else ... :)
offtopic, but I hope this is a typo and you meant Raid 1

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 14 Nov 2016 10:54
by FEAR-40
Dear moderator,
Yeap, i was kind of sleepy then i wrote this,
Is the one that copyes the data from one drive to the other,

Also am i in the right part of the forum or i should post it else where?
Thank you in advance
The fear

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 14 Nov 2016 11:17
by ChriZathens
Raid1 it is then...
Good.
Regarding your posting, I guess it would be more correct to post in the "Data Recovery and backups" section, but if needed another mod can move it there (I have no mod permissions in this section.. ;) ), no worries...

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 14 Nov 2016 11:27
by FEAR-40
Dear Moderator ,

yeah I'm new and I don't worry about this , If I am an Out-law I should be punished :D

So I will post the question there too , and hope that I will find a nice Solution because the Bussines QNAP's cost a small fortune and If i need 2 or 3 of them .. good bye :D

So thank you again for the tip ,

Thank you in advance

The Fear

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 14 Nov 2016 18:41
by MikeMac
FEAR-40 wrote:
If you have any other idea I would be Grateful ,
https://en.wikipedia.org/wiki/Bareos
https://en.wikipedia.org/wiki/Bacula

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 14 Nov 2016 19:16
by raulfg3
ChriZathens wrote:Raid1 it is then...
Good.
Regarding your posting, I guess it would be more correct to post in the "Data Recovery and backups" section, but if needed another mod can move it there (I have no mod permissions in this section.. ;) ), no worries...
Done.

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 14 Nov 2016 19:20
by FEAR-40
raulfg3 wrote:
ChriZathens wrote:Raid1 it is then...
Good.
Regarding your posting, I guess it would be more correct to post in the "Data Recovery and backups" section, but if needed another mod can move it there (I have no mod permissions in this section.. ;) ), no worries...
Done.
Dear Admin ,

Thank you :)

The Fear ...

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 14 Nov 2016 19:21
by raulfg3

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 29 Jun 2017 12:59
by mariad
Is not IPSec protocol a better security option to use?

Re: Automatic Off-side Backup Via VPN and encrypted container

Posted: 03 Jul 2017 22:06
by FEAR-40
exoruel wrote:
29 Jun 2017 05:23
The first thing I tried was to enable incoming PPTP connections directly to the server. This was quite succesful.
PPTP protocol is Broken , un-secure and totally easily hack-able .... you should consider other protocols like OpenVPN or IPsec e.t.c