[ale] Iptables: Temporarily mounting a windows share

[joe at madewell.com (Joe Steele)]

Sounds like you want to do something like this:

# save your existing rules
iptables-save  > original-rules
# Add additional rules needed for mounting the share:
iptables -I ...
. . .
# mount the share
mount -t cifs ...
# copy your files
. . .
# umount
. . .
# Restore the original firewall
iptables-restore < original-rules

--Joe
 

Jeff Hubbs wrote:
> My cleanest option for offloading backup tarballs from an 
> Internet-reachable server involves dropping the tarballs onto a nearby 
> Windows server that's already part of the backup rotation.  My iptables 
> rules preclude this at the moment.
>
> Instead of modifying my iptables script to allow me to "mount -t 
> cifs..." from the server at any time, I'd prefer to have the backup 
> script make the minimum necessary iptables rules changes temporarily, 
> mount the windows share, write the tarballs to the mount point, unmount 
> the windows share, and change the iptables rules back like they were.   
> How might I invoke this in my backup script?
>
> Jeff