Date: Fri, 12 Jan 2001 17:46:16 -0800 From: Kris Kennaway <kris@FreeBSD.ORG> To: Roman Shterenzon <roman@xpert.com> Cc: Artem Koutchine <matrix@ipform.ru>, freebsd-security@FreeBSD.ORG Subject: Re: Encrypted networked filesystem needed Message-ID: <20010112174616.D23818@citusc.usc.edu> In-Reply-To: <Pine.LNX.4.30.0101122013350.25136-100000@jamus.xpert.com>; from roman@xpert.com on Fri, Jan 12, 2001 at 08:22:58PM %2B0200 References: <00aa01c07cbd$71209dc0$0c00a8c0@ipform.ru> <Pine.LNX.4.30.0101122013350.25136-100000@jamus.xpert.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--EP0wieDxd4TSJjHq Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, Jan 12, 2001 at 08:22:58PM +0200, Roman Shterenzon wrote: > If IPSec is supported on both sides, it is the best available solution. > You'll get a completely transparent encryption and a powerful NFSv3 > server/client. Did I mention that FreeBSD rocks? > This way all network services will be secured and since the most of IPSec > (AH/ESP) is done in the kernel mode, it'll be quite fast even on > moderate hardware. Unfortunately I think there are some layering bugs with NFS + IPSEC on FreeBSD - I have had lots of NFS filesystem wedges when testing this. Kris --EP0wieDxd4TSJjHq Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE6X7NmWry0BWjoQKURAmLxAJoDXx0h9m/bg2utAqVREIpcbyza4ACfX+5E qJ9rpZ/UZsRSqlodcChm+fU= =mfmA -----END PGP SIGNATURE----- --EP0wieDxd4TSJjHq-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010112174616.D23818>