Re: Question on the safety sharing NFS with untrusted machines.

2002-08-08 Thread Michelle Konzack
Hello, Am 13:28 03/08/02 +0200 hat Cristian Ionescu-Idbohrn geschrieben: On Fri, 2 Aug 2002, Michelle Konzack wrote: there is a Debian-Package ssl-nfs (or secure-nfs) in the Mirror... It is much more save the all other trics with your Networks. And what mirror would that be? Any pointers?

Re: Question on the safety sharing NFS with untrusted machines.

2002-08-03 Thread Cristian Ionescu-Idbohrn
On Fri, 2 Aug 2002, Michelle Konzack wrote: there is a Debian-Package ssl-nfs (or secure-nfs) in the Mirror... It is much more save the all other trics with your Networks. And what mirror would that be? Any pointers? Cheers, Cristian

Re: Question on the safety sharing NFS with untrusted machines.

2002-08-02 Thread Michelle Konzack
Hello, there is a Debian-Package ssl-nfs (or secure-nfs) in the Mirror... It is much more save the all other trics with your Networks. Michelle Am 13:07 25/07/02 -0500 hat Dast geschrieben: Hello all, So my question is, is it safer to host the NFS from the DMZ and mount remotely on machines

Re: Question on the safety sharing NFS with untrusted machines.

2002-07-26 Thread Joseph Dane
cfy1 == cfy1 Dast writes: cfy1 Hmm, I'll look into those filesystems. Are they supported in cfy1 stock Debian kernels and userland tools or do they require cfy1 extra patches? dunno about SFS. AFS is packaged, but requires some kernel modifications (IIRC it's just a kernel module) and a

Question on the safety sharing NFS with untrusted machines.

2002-07-25 Thread Dast
Hello all, I'm looking at re-arranging my network, which currently consists of an ipmasq box with 3 nics, one going to the outside, one going to a DMZ, and one going to an internal network. The masq box allows a few services into machines in the DMZ, restricts the DMZ from getting outside except

Re: Question on the safety sharing NFS with untrusted machines.

2002-07-25 Thread Mike Renfro
On Thu, Jul 25, 2002 at 01:07:19PM -0500, Dast wrote: So my question is, is it safer to host the NFS from the DMZ and mount remotely on machines in the internal network, or host the NFS from a machine on the internal network and remotely mount in the DMZ? Or does it matter? I suppose it

Re: Question on the safety sharing NFS with untrusted machines.

2002-07-25 Thread Lupe Christoph
On Thursday, 2002-07-25 at 14:51:09 -0500, Dast wrote: Mike Renfro [EMAIL PROTECTED] writes: On Thu, Jul 25, 2002 at 01:07:19PM -0500, Dast wrote: So my question is, is it safer to host the NFS from the DMZ and mount remotely on machines in the internal network, or host the NFS from

Re: Question on the safety sharing NFS with untrusted machines.

2002-07-25 Thread Rick Moen
Quoting Dast ([EMAIL PROTECTED]): My problem is, I need to have a network mount shared between a machine in the DMZ (untrusted) and machines in the internal network. Hosting NFS on the ipmasq box is not an option for me. Any chance you could use AFS or SFS for this, instead? As Mike Renfro

Re: Question on the safety sharing NFS with untrusted machines.

2002-07-25 Thread Dast
[EMAIL PROTECTED] (Lupe Christoph) writes: If you don't have realtime requirements, you could rsync between the two machines. The amount of data is many gigabytes, so I don't want to duplicate things and use twice the disk space. Otherwise that would be a fine solution. -- --Dast Practice

Re: Question on the safety sharing NFS with untrusted machines.

2002-07-25 Thread Dast
Rick Moen [EMAIL PROTECTED] writes: Any chance you could use AFS or SFS for this, instead? As Mike Renfro points out, you're creating an intermachine dependency between the bastion host and the inside machine no matter how you do it, but at least, with those, the mount and resource-access

Re: Question on the safety sharing NFS with untrusted machines.

2002-07-25 Thread Rick Moen
Quoting Dast ([EMAIL PROTECTED]): Hmm, I'll look into those filesystems. Are they supported in stock Debian kernels and userland tools or do they require extra patches? I have no idea about Debian packaging. For SFS of Linux, you'll need your Linux system to have a kernel with NFSv3 support

Re: Question on the safety sharing NFS with untrusted machines.

2002-07-25 Thread Mike Renfro
On Thu, Jul 25, 2002 at 07:23:43PM -0700, Rick Moen wrote: Hmm, I'll look into those filesystems. Are they supported in stock Debian kernels and userland tools or do they require extra patches? I have no idea about Debian packaging. For SFS of Linux, you'll need your Linux system to