Re: Question on the safety sharing NFS with untrusted machines.

[Dast <cfy1@ra.msstate.edu>]

Mike Renfro <renfro@tntech.edu> writes:

> On Thu, Jul 25, 2002 at 01:07:19PM -0500, Dast wrote:
> 
> > So my question is, is it safer to host the NFS from the DMZ and
> > mount remotely on machines in the internal network, or host the NFS
> > from a machine on the internal network and remotely mount in the
> > DMZ?  Or does it matter?
> 
> I suppose it depends on what sort of activity you need to do over the
> NFS mount.

Thanks for the feedback.  That certainly gives me something to chew
on. 

The mount will be just bulk file storage.  I haven't decided if the
machine in the DMZ needs read/write or just read access, however.
Everything on that mount should be publicly accessible to all users,
so in terms of one user getting another's files, that isn't an issue.

-- 
--Dast

 "Practice allows me to receive information like faxes."
  Pharoahe Monch


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org