Re: iptables and NFS
On Monday 12 Dec 2005 23:09, Ghe Rivero wrote:
> Hi everyone,
> we are going to use netfilter for our main firewall at University and a
> couples of dudes come to my mind now:
> 1.- Since we have severals machines (around 50) and all king of
> services, which is the best way to have everything more or less order?
> 2.- NFS use dinamic ports on conenctions with the clients. Howis it
> supposed to be firewaled (The same can be for some Windows isssues)
> Thx in advanced to everyone!
> Ghe Rivero
> CPD - Universidad Pontificia de Salamanca
> Tlf. 923 277 136 - Ext. 7263
> .''`. Pienso, Luego Incordio
> : :' :
> `. `' Proudly running Debian GNU/Linux (Sid 2.6.9-smp Ext3)
> `- www.debian.org www.upsa.es
> GPG Key: 26F020F7
> GPG fingerprint: 4986 39DA D152 050B 4699 9A71 66DB 5A36 26F0 20F7
As others have said, it really is not advisable to open NFS to the internet.
It would be preferable to use some sort of VPN to allow what you are trying to
do. (Or even just SSH forwarding.)
Is a VPN a valid proposition at your location ?