Rsa97

...
address 192.168.1.3
netmask 255.255.255.0
...

acl badboys1 src 192.168.0.233/32
acl badboys2 src 192.168.0.234/31
acl badboys3 src 192.168.0.236/30
acl badboys4 src 192.168.0.240/28
acl localnet src 192.168.0.0/24

http_access deny badboys1
http_access deny badboys2
http_access deny badboys3
http_access deny badboys4
http_access allow localnet

tar -cz <что нужно заархивировать> | scp /dev/stdin user@backup-server:/backup-path

apt-get update
apt-get upgrade