Hi everyone,
I have TWO linux machines in my office. One is on LAN (only locally-accessible) and the other on WAN (WWW-accessible). On the WAN, I have an apache server running but I also mounted a hard drive from the LAN machine using NFS so that I can easily access and transfer data files between the two machines.
My question is: Is the hard drive from the LAN machine mounted on the WAN computer accessible from outside LAN? In other words, if an hacker breaks into my server on the WAN machine, will (s)he be able to access data on my NFS-mounted hard drive from the LAN machine? I would assume that since IP assigned to my LAN machine is only accessible locally, access from outside LAN to this hard drive will not be available. What do you think?
Thank you for your suggestions. Amjad
well it is mounted on the WAN so it is accessible there right? NFS is by the way not the best way for a "secure" file share. But what has this to do with 389? Seems like a general networking question to me and it depends mostly on what is done in terms of firewalling.
On Wed, Mar 26, 2014 at 11:39 PM, Amjad Farooq amjad@farooqlab.net wrote:
Hi everyone,
I have TWO linux machines in my office. One is on LAN (only locally-accessible) and the other on WAN (WWW-accessible). On the WAN, I have an apache server running but I also mounted a hard drive from the LAN machine using NFS so that I can easily access and transfer data files between the two machines.
My question is: Is the hard drive from the LAN machine mounted on the WAN computer accessible from outside LAN? In other words, if an hacker breaks into my server on the WAN machine, will (s)he be able to access data on my NFS-mounted hard drive from the LAN machine? I would assume that since IP assigned to my LAN machine is only accessible locally, access from outside LAN to this hard drive will not be available. What do you think?
Thank you for your suggestions. Amjad
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
Dear All.
There is simple funda..
just add one more NIC to ur server.. Take the lan connection to your office lan.. and config NFS..
The hacker can hack any thing from your machine wether that is mounted or persistant drive. dnt wory abt it...
He will do his work perfectly :-)..
On 3/27/2014 2:57 PM, Vincent Gerris wrote:
well it is mounted on the WAN so it is accessible there right? NFS is by the way not the best way for a "secure" file share. But what has this to do with 389? Seems like a general networking question to me and it depends mostly on what is done in terms of firewalling.
On Wed, Mar 26, 2014 at 11:39 PM, Amjad Farooq <amjad@farooqlab.net mailto:amjad@farooqlab.net> wrote:
Hi everyone, I have TWO linux machines in my office. One is on LAN (only locally-accessible) and the other on WAN (WWW-accessible). On the WAN, I have an apache server running but I also mounted a hard drive from the LAN machine using NFS so that I can easily access and transfer data files between the two machines. My question is: Is the hard drive from the LAN machine mounted on the WAN computer accessible from outside LAN? In other words, if an hacker breaks into my server on the WAN machine, will (s)he be able to access data on my NFS-mounted hard drive from the LAN machine? I would assume that since IP assigned to my LAN machine is only accessible locally, access from outside LAN to this hard drive will not be available. What do you think? Thank you for your suggestions. Amjad -- 389 users mailing list 389-users@lists.fedoraproject.org <mailto:389-users@lists.fedoraproject.org> https://admin.fedoraproject.org/mailman/listinfo/389-users-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
389-users@lists.fedoraproject.org
-
Amjad Farooq -
Pritam Khedekar -
Vincent Gerris