topic Re: Secure NFS from a linux box in the DMZ in Operating System - Linux

Secure NFS from a linux box in the DMZ

Oren Amit — Thu, 19 Dec 2002 08:50:29 GMT

Is there a secure way to enable NFS on a linux box that is located in the company DMZ ?
The box will export mounts to a machine inside the company firewall.
Is there an option to create NFS over SSH ?
Thanks

Re: Secure NFS from a linux box in the DMZ

Vincent Stedema — Thu, 19 Dec 2002 11:10:52 GMT

Hi,

Here's a link to a page on tunneling NFS over SSH: http://www.math.ualberta.ca/imaging/snfs/

Hope this helps.

Regards,

Vincent

Re: Secure NFS from a linux box in the DMZ

Oren Amit — Thu, 19 Dec 2002 12:02:12 GMT

Thanks, I saw this site before - I was looking for some one that did it.
Also how secure is it ?
I'm importing an unsecure FS into my secure area.

Re: Secure NFS from a linux box in the DMZ

U.SivaKumar_2 — Fri, 20 Dec 2002 07:08:16 GMT

Hi,

Always user NFS over TCP in the firewalled environment .
I would recommend to use kerberos authenticated NFS ( secure RPC )or DES authenticated NFS .

regards,
U.SivaKumar