Got 2 firewalls, a primary and a backup. Both send their backups to a remote site - no problem.
Although not ideal, the 2 boxes do get their configs out of sink - mainly dur to me making changes on the live firewall and forgeting to replicate them onto the backup!
Of course, the whole point of having the 2 boxes, is if the primary were to packup I would simply be able to apply the backup to the secondary box and all would be well again.
I would like to use the backup files to keep the 2 boxes in sync. After uncompressing and comparing the 2 backup files I have I can see a large .xml file that I will need, and also a natmasq file. Which file holds the packetfilter rules?
I only every change definitions, nat and packetfilter rules and these are the ones I want to keep in sync.
You may ask why I dont just restore the backup and then change the name and IP address of the secondary box? Well I'm lazy and dont want to walk down to the machine room with my laptop to unplug the lan cables to do a restore!
Cheers
Bryan
This thread was automatically locked due to age.
