(ro, root_squash)??
What's better for my network then? NFS seems to offer me better
performance over SMB. I don't know why though.

Seriously curious,

Mr O.


--- Cory Petkovsek <[EMAIL PROTECTED]> wrote:
> Maybe it's just me, but I'm surprised that nfs is so widely
> used.  It
> seems to be very insecure for an internal lan.  The "security"
> I see it
> using is host based and client uid based.  Neither of which
> are good
> internal security.  Is this all nfs can do?  I can imagine
> evil_cracker
> from plugging in his laptop configured with an allowed IP and
> his
> username as my uid and mounting rw network shares.  At least
> smbfs/smbmount authenticates with a password, even if it is
> transfered
> using an insecure protocol.
> 
> Sheesh, putting ipsec on every machine and using opportunistic
> encryption internally seems more and more attractive and worth
> the
> setup.
> 
> Cory


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
_______________________________________________
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug

Reply via email to