Doing 'the inverse' seems like the more secure solution.
the backup function is the only function that the backup server
all incoming connections to the backup server are blocked
all outgoing connections (except the connection to the server being
backed-up) are blocked
the only process that the backup server performs is the backup process