[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

OT - NFS through firewalls



I've got a setup like this:

 +------+                  +--------+
 |NFS   | 10.0.0.20        |Firewall| 192.168.1.1      +--------+
 |Server|------------------|        |----+-------------|Client 1|
 +------+        10.0.0.38 +--------+    |192.168.1.7  +--------+
                                         |
                                         |             +--------+
                                         +-------------|Client 2|
                                         |192.168.1.8  +--------+
                                         |
                                         |             +--------+
                                         +-------------|Client 3|
                                          192.168.1.9  +--------+

The firewall box is using NAT to connect all the internal machines to
external machines through the firewall's 10.0.0.18 interface:

  iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j SNAT \
    --to-source 10.0.0.38

And all the clients have the firewall's internal interface as their
gateway:

  Kernel IP routing table
  Destination     Gateway         Genmask         Flags 
  192.168.1.0     0.0.0.0         255.255.255.0   U
  0.0.0.0         192.168.1.1     0.0.0.0         UG

What happens if each of my client machines NFS mounts the same drive
from the server?  Are there problems with doing this?  I suppose I could
NFS mount the directory on the firewall machine, and then NFS mount this
NFS-mounted directory on each of the clients, but I don't know if that's
a good idea either.

Any advice?

Thanks!

Chris
-- 
Christopher S. Swingley           phone: 907-474-2689
Computer Systems Manager          email: cswingle@iarc.uaf.edu
IARC -- Frontier Program          GPG and PGP keys at my web page:
University of Alaska Fairbanks    www.frontier.iarc.uaf.edu/~cswingle


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: