Es ist ja:
Specifying replication direction
When you choose replication direction, you identify which server(s) send and receive changes. The direction you choose does not affect or restrict the functionality of the replication process itself.
By default, Domino uses Pull-Push as the replication direction. However, you can specify a different replication direction.
+ Pull-Push, the default replication direction, is a two-way process in which the calling server pulls updates from the answering server and then pushes its own updates to the answering server. Using Pull-Push, the replicator task on the calling server performs all the work.
+ Pull-Pull is a two-way process in which two servers exchange updates. Using Pull-Pull, two replicators -- one on the calling server and one on the answering server -- share the work of replication.
+ Push-only is a one-way process in which the calling server pushes updates to the answering server. One-way replication always takes less time than two-way replication.
+ Pull-only is a one-way process in which the calling server pulls updates from the answering server. One-way replication always takes less time than two-way replication.
D.h. bei Pull-Push wird die ganze Arbeit vom initierenden Server (Replicator) gemacht. Daher kann ich mir schon vorstellen, dass er Dokumente auf Server Firma1 pushed, obwohl der die gar nicht lesen darf. Das wäre aber unschön.
Um sicherzugehen werde ich mal Pull-pull aktivieren.