Conversation

Notices

  1. !linux about to set up nfs on Dennis (Fedora) and Nikola (Debian) to be able to share files. Any reason I should not do this, or a better approach?

    Monday, 09-Jun-14 17:36:19 UTC from oracle.skilledtests.com
    1. Does # support authentication and/or encryption out of the box now?I wouldnt want NSA getting cleartext while sniffing from my DSL router

      Monday, 09-Jun-14 19:34:26 UTC from quitter.se
      1. @mcscx I don't know (yet) - but this is purely for my LAN, not external (or does that make no difference?) #

        Monday, 09-Jun-14 19:37:46 UTC from oracle.skilledtests.com
        1. @mk my concern is NSA being tempted& able to break into most people's LAN via their stock broadband routers to analyze their inhouse traffic

          Monday, 09-Jun-14 20:23:50 UTC from quitter.se
          1. @mcscx I have a Fritz box - I don't think that is a 'NSA stock broadband router'

            Monday, 09-Jun-14 20:29:41 UTC from oracle.skilledtests.com
            1. @mk "their [router]" was meant to refer to "people", not the NSA :-)

              Monday, 09-Jun-14 20:39:45 UTC from quitter.se
              1. @mk many router have known (and maybe unknown) remote administration access (e.g.for ISP). Fritzboxes support the # method.

                Monday, 09-Jun-14 20:45:30 UTC from quitter.se
                1. @mcscx so, if my Fritzbox does have that, remote administration just needs to be disabled? (I think it is, but I'd have to check)

                  Monday, 09-Jun-14 20:54:36 UTC from oracle.skilledtests.com
                  1. @mk in !DE some Fritzbox-selling ISPs enable th remote administration but HIDE the config option so the user cant see there's sth to disable

                    Monday, 09-Jun-14 22:43:57 UTC from quitter.se
                2. @mcscx I checked: there currently is NO access to my Fritz!box from the internet. 'TR=064 standard' is mentioned; access only if a user is created and allowed access from Internet (which I haven't done). My provider isn't the type that would hide things from me. ;-)

                  Tuesday, 10-Jun-14 17:20:11 UTC from oracle.skilledtests.com
      2. @mcscx I should also mention that I've tried samba and have been unable to make it work (or it works in only one direction - I need both machines being able to function as server as well as client)

        Monday, 09-Jun-14 19:39:42 UTC from oracle.skilledtests.com
      3. @mcscx I found this: http://nfs.sourceforge.net/nfs-howto/ar01s06.html

        Monday, 09-Jun-14 19:46:21 UTC from oracle.skilledtests.com
      4. @mcscx this article suggests that nfsv4 supports encryption (and more): http://www.enterprisenetworkingplanet.com/netos/article.php/3644471/Implement-NFSv4-Domains-and-Authentication.htm

        Monday, 09-Jun-14 20:08:40 UTC from oracle.skilledtests.com
        1. @mk NFSv4 seems ok, but NFSv3 without even password authentication is IMO a huge security hole.

          Monday, 09-Jun-14 20:20:45 UTC from quitter.se
          1. @mcscx it seems both machines do support nfs4, so no problem there - I would just have to install the right bits (some are already installed, aparently)

            Monday, 09-Jun-14 20:46:24 UTC from oracle.skilledtests.com