Operating System - Linux
1835527 Members
3025 Online
110078 Solutions
New Discussion

Secure NFS from a linux box in the DMZ

 
Oren Amit
Advisor

Secure NFS from a linux box in the DMZ

Is there a secure way to enable NFS on a linux box that is located in the company DMZ ?
The box will export mounts to a machine inside the company firewall.
Is there an option to create NFS over SSH ?
Thanks
3 REPLIES 3
Vincent Stedema
Esteemed Contributor

Re: Secure NFS from a linux box in the DMZ

Hi,

Here's a link to a page on tunneling NFS over SSH: http://www.math.ualberta.ca/imaging/snfs/

Hope this helps.

Regards,

Vincent
Oren Amit
Advisor

Re: Secure NFS from a linux box in the DMZ

Thanks, I saw this site before - I was looking for some one that did it.
Also how secure is it ?
I'm importing an unsecure FS into my secure area.
U.SivaKumar_2
Honored Contributor

Re: Secure NFS from a linux box in the DMZ

Hi,

Always user NFS over TCP in the firewalled environment .
I would recommend to use kerberos authenticated NFS ( secure RPC )or DES authenticated NFS .

regards,
U.SivaKumar

Innovations are made when conventions are broken