Secure backup subnetting?

[jabr at blu.org (John Abreau)]

We're trying to set up a Veritas backup system, and it's been suggested
that we add an additional network card to each host to create an extra LAN
for the backups. I'm concerned because this will bypass out firewall.
However, one of the reasons we need to do this is that the existing
Veritas setup is apparently overloading the firewall, and the backup
processes lose their connections and abort when this happens.

How do other sites do this sort of thing? How do you make it secure? I
would imagine something like ipchains on Linux could be configured to
restrict the new network so only Veritas activity gets passed along, but I
don't know what the equivalent on Solaris would be.

The hosts to backup include Solaris, NT, and Linux systems.

--
John Abreau / Executive Director, Boston Linux & Unix 
Email: jabr at blu.org / URL: http://www.blu.org
ICQ#28611923 / AIM abreauj
-----------------------------------------------------------------------
"Working with NT is like trying to tune a watch wearing oven mitts.
 You can't get your fingers inside like you can with UNIX.
-----------------------------------------------------------------------

-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).