Best practices for backing up small mailserver to remote location
Adi Pircalabu
adi at ddns.com.au
Thu Aug 9 03:21:35 EEST 2018
On 09-08-2018 10:05, Kenneth Porter wrote:
> On 8/7/2018 5:08 PM, Adi Pircalabu wrote:
>> - Since you're on dynamic IP at home, set up a VPN tunnel using the
>> mailserver as server and HTPC as client. OpenVPN is ubiquitous and
>> widely supported.
>> - rsync your mailboxes using the tunnel connection.
>> This way you can back up your entire server, not only the mailboxes.
>
> Instead of openvpn, I use openssh. Use compression in the ssh tunnel,
> not the rsync connection, as rsync compression tends to be buggy and
> interrupts the download. I run sshd on a non-standard port to keep my
> logs relatively free of script kiddy noise from people looking for an
> ssh connection to crack. Run fail2ban to lock out the remaining script
> kiddies. Use a client certificate to log in with ssh unprompted,
> making it easy to download in a cron job.
There's more than one way to skin a cat :) Moving the ssh port and
adding fail2ban in the mix is another option. Personally tend to use VPN
tunnels for dynamic IP clients for various reasons, such as being able
to lock clients out by revoking keys.
--
Adi Pircalabu
More information about the dovecot
mailing list