Right.  Doing an inbound NFS mount is not a good idea.  As David 
mentioned NFS mount the PSN server's exported file system on a host 
on the Protected network.
This is much safer and nothing needs to be configured.

Paul

>Send postings to: [EMAIL PROTECTED]
>Access the list archives at:
>http://www.gnatbox.com/gb-users/
>----------------------------------
>It is not a good idea to export NFS from the PRO to any other network. If
>you feel compelled to use shared files, export from the PSN to the PRO.
>The reason for a PSN at all is to avoid the risk to your PRO if the PSN is
>compromised.  Opening up a NFS server on the PRO to the PSN increases the
>risk of exploit.
>
>Dave Morris
>
>On Fri, 21 Jan 2000, Jason Antonacci wrote:
>
>>  We are setting up a PSN with IP Pass Through in order to run 
>>Netmeeting.  I want to do an NFS mount of our HTTP Proxy 
>>Configuration files from the Linux server on the PRO to simplify 
>>administering two machines.  I cannot run just one because each 
>>provides separate sets of services to their networks.
>>
>>  I know I will have to have the SunRPC port 111.
>>
>>  Jason S. Antonacci
>>  Computer Support Specialist IV
>>  Univ. of Georgia - Savannah River Ecology Lab
>>  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>  Office: 803.725.5894
>>  Pager: 706.869.4043
>>  Fax: 503.218.7129
>>  Email: [EMAIL PROTECTED]
>>
>>
>
>----------------------------------------------
>To Unsubscribe: send mail to [EMAIL PROTECTED]
>with "unsubscribe gb-users your_email_address
>in the body of the message

-------------------------------------------------------------------------
Paul Emerson                               Tel: +1.407.380.0220 x106
Global Technology Associates, Inc.         Fax: +1.407.380.6080
3505 Lake Lynda Drive                   Mobile: +1.407.497.3379
Suite 109                                Pager: +1.888.440.8232
Orlando, Florida 32817                   Email: [EMAIL PROTECTED]
USA                               Mobile Email: [EMAIL PROTECTED]
                                            Web: http://www.gta.com
-------------------------------------------------------------------------



Reply via email to