Re: nfs exports

[Robert Citek <rwcitek@alum.calberkeley.org>]

On Monday, Nov 22, 2004, at 11:21 US/Central, Bryan J. Smith wrote:
> On Mon, 2004-11-22 at 11:52, Casey Boone wrote:
>> internet<->linux firewall<->local lan<->linux fileserver
>> the firewall and fileserver are the ones i am doing nfs exports on
>
> Ouch!  Don't run RPC services on the firewall, even if they are only 
> LAN
> facing.  General practice is minimal services on the firewall, and RPC
> is one big and bad one!  ;->

Agreed.  On the other hand, this would be a great learning experience.

Casey, how important is the data on the fileserver or the firewall?  
That is, if someone cracks in, can you afford to start from scratch and 
lose all the data?

Regards,
- Robert
http://www.cwelug.org/downloads
Help others get OpenSource.  Distribute FLOSS for
Windows, Linux, *BSD, and MacOS X with BitTorrent


-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.