This is an extension of my question here (Small office backups, small NAS (RAID) vs single disk).
What would be a good way to structure a NAS backup solution to prevent deliberate corruption by a person and\or malicious software.
Let's say I have a small office with 5-10 PCs. Sure I can have each PC mount the NAS and each user could have backup folders such as
\\SHARE\User1\backups\daily \\SHARE\User1\backups\weekly \\SHARE\User1\backups\monthly \\SHARE\User1\backups\yearly \\SHARE\User2\backups\daily \\SHARE\User2\backups\weekly \\SHARE\User2\backups\monthly \\SHARE\User2\backups\yearly . .
I could use a script that runs on each PC at predefined intervals and copies the files appropriately. The issue with this is since the user can mount the NAS they (or malware running as their user) can potentially nuke all the backups for that User.
The only solutions to this dilema I can think of are:
- Find a NAS that can poll the PCs via SSH (install sshd on them) and scp the files. I do not know of a NAS that can do this. I have been looking at QNAP turbo NAS.
- Have a server poll the PCs via SSH and copy to the NAS (as only it can mount the NAS). This seems like a waste of a PC and inefficent.
- Only have the user be able to access and\or mount the "daily" folder and have the NAS itself make copies to weekly\monthly\yearly at predefined intervals (Can a NAS do this)?
- Some crazy software solution I never heard of?
- Some NAS that runs a backup protocol I never heard of?