Securing a Backup Server - Overclock.net - An Overclocking Community

Forum Jump: 

Securing a Backup Server

 
Thread Tools
post #1 of 5 (permalink) Old 09-17-2019, 10:45 AM - Thread Starter
New to Overclock.net
 
Nikado7's Avatar
 
Join Date: Sep 2014
Posts: 35
Rep: 0
Securing a Backup Server

I work at a small place with 7 computers. I have a backup computer with drives hooked to it that I back everything up to. That is that computers sole purpose, nothing else. I want to see about protecting it from a ransomware attack... My thoughts are, disable internet access, encrypt everything on it, and make the network 1 way. As in I put the backup program on it and it pulls all the files from the other computers through shared folders, without the server sharing anything back. So I would password protect the hell out of the server so nobody could access it but I can access theirs to make backups..

Is this a surefire way to protect it or is there something else I need to do or what?

I should also say I do make monthly external backups so if anything happens then I'm good other than the current month. I just wanted to see if it was possible to secure the server so they wouldn't be screwed on a months worth of data since it's a machine shop and there might be weeks worth of CAD files they drew up that could potentially be lost.

Also is there a benefit to windows server over regular windows 10? I just have a regular computer and it is what does all the backups, didn't know if there was a benefit to windows server edition if all it does is backups..

Thanks for the help!
Nikado7 is offline  
Sponsored Links
Advertisement
 
post #2 of 5 (permalink) Old 10-09-2019, 10:54 PM
RIP OCN
 
Join Date: Dec 2014
Posts: 599
Rep: 25 (Unique: 19)
How many gigs of CAD files and data would you accumulate in a month?
Might be a possible solution to just store the current months data in a cloud backup (with amazon or someone), then you know you are covered for the current month to date, and covered for the rest by your offsite backups? Your server could then act as a local file server for the current month with no real worries if it is corrupted.
anti-clockwize is offline  
post #3 of 5 (permalink) Old 10-09-2019, 11:47 PM
New to Overclock.net
 
Paradigm Shifter's Avatar
 
Join Date: Aug 2009
Location: Japan
Posts: 2,797
Rep: 250 (Unique: 200)
For the truly worried about ransomware, an (incremental) LTO8 tape backup once every two weeks might be the ticket. Not cheap though.


Paradigm Shifter is offline  
Sponsored Links
Advertisement
 
post #4 of 5 (permalink) Old 10-10-2019, 05:05 AM
Not New to Overclock.net
 
fragamemnon's Avatar
 
Join Date: Oct 2010
Location: Bulgaria
Posts: 3,859
Rep: 249 (Unique: 187)
What is your environment? What backup program do you use?

MEGATRON
(17 items)
GIGATRON
(10 items)
CPU
Ryzen 7 1700
Motherboard
Crosshair VI Hero
GPU
Gigabyte RX 580
RAM
2x8 G.Skill Trident 3200 CAS14 @ 3466 CAS14
Hard Drive
2x1TB WD Black RAID 0
Hard Drive
3TB WD Red
Hard Drive
Samsung 840 Evo 250GB
Power Supply
FSP Aurum PT 1200W
Cooling
Stock... hue hue
Case
Thermaltake Core X9
Monitor
Benq XL2411Z
Monitor
Dell U2412M
Monitor
Dell U2412M
Keyboard
KBC Poker II MX Clears
Mouse
Zowie ZA11
Mouse
old school Razer Goliathus
Audio
Aune T1 -> Yamaha A-720 -> Sennheiser HD650 | Sony MDR-XB500
CPU
Intel Xeon E5-2650 v4 @ 2.00GHz
CPU
Intel Xeon E5-2650 v4 @ 2.00GHz
Motherboard
SuperMicro X10DAL-i
GPU
nay
RAM
2x8GB (for now) Kingston DDR4 @ 2133MHz/C16
Hard Drive
Samsung 840 120GB
Power Supply
SeaSonic SS850-AM
Cooling
EK-Vardar F4 on an Arctic Freezer i11
Case
overrated
Operating System
Ubuntu Server 16.04
▲ hide details ▲


fragamemnon is offline  
post #5 of 5 (permalink) Old 10-10-2019, 05:48 AM
New to Overclock.net
 
Dotachin's Avatar
 
Join Date: Jul 2014
Posts: 797
Rep: 38 (Unique: 30)
How do you deal with normal corruption over time in the backup pc drives? any redundant drives at least?

2 ways to do this imo one online one offline, you can do both if you want:

online: backblaze ($5 a month and done)
offline: snapraid (it's free and deals with the corruption, it's basically a non-active raid that runs on command line) with that running daily and your monthly backup it should be fine.

edit: should point out the weak point about snapraid is that it doesn't like modified files, you should always rename them with a date at the end if they are incremental so they remain unique

Last edited by Dotachin; 10-10-2019 at 05:52 AM.
Dotachin is offline  
Reply

Quick Reply
Message:
Options

Register Now

In order to be able to post messages on the Overclock.net - An Overclocking Community forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.
User Name:
If you do not want to register, fill this field only and the name will be used as user name for your post.
Password
Please enter a password for your user account. Note that passwords are case-sensitive.
Password:
Confirm Password:
Email Address
Please enter a valid email address for yourself.
Email Address:

Log-in



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page


Forum Jump: 

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off