Re: Secure NFS

Article View: demon.security

Article #5

From: Ddraig Systems Administrator
Date: Fri, 01 Dec 1995 00:00

18 lines
1311 bytes

|> Philip Shotton <phil@iisc.co.uk> wrote:
|> 
|> > I am looking for ways of implementing NFS between two different
|> > locations on the Internet in a secure fashion. We have a site in
|> > London and a site in the USA.

I'm pretty sure you'll have loads of problems implementing NFS securely
over the inet.  A while back one of the security mailing lists carried
a report of some experimentation done by some Americans who were basically
intercepting and replacing NFS packets transparently.  If I remember correctly,
NFS is a UDP based service, and hence is even more limited wrst security than
other "high level" protocols.

My advice would be don't.

Regards

Ian

Technical Details

Message-ID: <49nu1h$am@ddraig.demon.co.uk>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <PHIL.95Nov29113848@mchenry.iisc.co.uk> <49k3b4$27n@cerebus.demon.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1065b6,9bcfb1998f80fc91
X-Google-Attributes: gid1065b6,public
X-Google-Thread: 108f6a,9bcfb1998f80fc91
X-Google-Attributes: gid108f6a,public
From: root@ddraig.demon.co.uk (Ddraig Systems Administrator)
Subject: Re: Secure NFS
Date: 1995/12/01
Message-ID: <49nu1h$am@ddraig.demon.co.uk>
X-Deja-AN: 120612344
distribution: world
x-nntp-posting-host: ddraig.demon.co.uk
references: <PHIL.95Nov29113848@mchenry.iisc.co.uk> <49k3b4$27n@cerebus.demon.co.uk>
followup-to: demon.security
organization: Ddraig
newsgroups: demon.security,demon.ip.support.unix

Reply to Parent Message