- -------------------------------------------------------------------------------- -
- Bacula is licenced under the GPL v2, and the LGPL, with some parts public domain -
- see the bacula source code at http://www.bacula.org for full details             -
- -------------------------------------------------------------------------------- -


README for the bacula file director client binary v2.2.6 for ipcop v1.4.16 - 1.4.21


prerequisites
-------------
1. A working bacula director somewhere on your network. This is a client for
   bacula 2.2.6 but this client will work with bacula versions down to 1.38

2. ipcop v1.4.16, 1.4.18, 1.4.19, 1.4.20 or 1.4.21. Other versions have not been
   tested but are likely to work correctly.


installing
----------
1. copy the files to your ipcop

2. ensure your download is complete by checking the md5sum  

     md5sum -c ipcop-bacula-fd-2.2.6.tar.bz2.md5

2. uncompress the archive using bunzip2 

     bunzip2 ipcop-bacula-fd-2.2.6.tar.bz2

3. untar in the root directory. The archive contains three files

     /sbin/bacula-fd                 - this is the compiled client
     /etc/bacula/bacula-fd.conf      - the configuration file
     /var/bacula/working/dummy       - an empty file, to create the directory

2. modify the file /etc/bacula/bacula-fd.conf to match your bacula setup

3. add a fileset entry for ipcop to your bacula director config. A sample 
   that will back up the whole ipcop is given below

4. add a job/schedule to bacula to backup the ipcop as needed


running
-------
1. run /sbin/bacula-fd

2. once you are happy with the operation of the client, add the command 
   into a script that gets called at boot, e.g, /etc/rc.d/rc.network


security
--------
1. the bacula client by default listens on ALL available interfaces on 
   port 9102. Existing ipcop iptables rules prevent connection to the client
   from red or orange, but connections WILL be still possible from BLUE 
   or grey1-4 (if you have the xtra-ifaces addon installed). 

   THIS MAY PRESENT A SECURITY RISK if you use BLUE.

   If you want to allow access only from green, edit the file 
   /etc/bacula/bacula-fd.conf and add the line below (using your green
   ip address, of course)

   FDAddress = 10.0.0.1

2. Please read the documentation for the bacula client configuration 
   directives at:

   http://www.bacula.org/dev-manual/Client_Fi_daemon_Configura.html#FiledConfChapter


Example Bacula Fileset Resource
-------------------------------

# backup everything on the ipcop
FileSet {
  Name = "ipcop"
  Include {
    Options {
      signature = MD5
    }
    File = /
    File = /var/log                     # logs are important on the firewall
    File = /boot                        # we need this for recovery
  }
  Exclude {
    File = /proc
    File = /tmp
    File = /var/log/cache               # exclude the squid cache
  }
}


Support
-------

1. Please post questions related to the use of this client on ipcop in the 
   ipcop unofficial support forum at:

        http://www.ipcops.com

2. Please post questions about bacula setup or client configuration to
   the bacula support mailing lists. Details can be found at:

        http://www.bacula.org/?page=support