Re: Is NFS export r/o safe from lan to dmz?

["Peter Teunissen" <oneman@onemanifest.net>]

On Mon, March 3, 2008 21:00, NN_il_Confusionario wrote:
> On Mon, Mar 03, 2008 at 12:03:32PM -0500, Douglas A. Tutty wrote:
>> Wouldn't a chrooted ftp server do the same thing?
>
> ftp is a intrinsecally more complex protocol than http (see the problems
> for firewalls with active/passive ftp...
>
> Moreover, the security history of ftp daemons is worse than the security
> history of http daemons (and it is possibly even worse than the security
> history of portmap/nfsd)
>

Neither ftp not minimalistic http would work in this case. Ftp is to
unsafe and minimal http wouldn't be sufficient for the streaming scripts /
mods.

I think rsync would be the only viable option. I'll go shopping for some
diskspace...


Thanks for all the replies.


Peter