From owner-freebsd-questions@FreeBSD.ORG Mon Apr 3 10:29:26 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7061A16A41F for ; Mon, 3 Apr 2006 10:29:26 +0000 (UTC) (envelope-from nospam@mgedv.net) Received: from mgedv.at (mail.mgedv.at [195.3.87.103]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1382D43D49 for ; Mon, 3 Apr 2006 10:29:26 +0000 (GMT) (envelope-from nospam@mgedv.net) Received: from metis (localhost [127.0.0.1]) by mgedv.at (SMTPServer) with ESMTP id D2E93186864 for ; Mon, 3 Apr 2006 12:29:24 +0200 (MEST) From: "No@SPAM@mgEDV.net" To: Date: Mon, 3 Apr 2006 12:29:28 +0200 Message-ID: <00b101c65709$7cd342e0$0a86a8c0@avalon.lan> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 In-reply-to: <44303AE1.4040404@mac.com> X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Thread-index: AcZWmDm3Y1NtYbXlRYmgB19FgoIDzgAcMbqA Subject: RE: hunting for secure fileserver-connection! X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: nospam@mgedv.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2006 10:29:26 -0000 > If you don't trust CIFS/Samba enough to be secure against local sniffers, and > you won't run IPsec, you're left with odd things like Sun's SecureNFS software, > only I doubt that's available for a FreeBSD fileserver. that's what i was afraid of. ipsec would be great, if it was possible to have it setup itself against the server each time you login (maybe windows logon) but theres always a client software needed, and in most cases, you're not able to access other networks smoothly if connected. > If you've got 1.5TB of storage, perhaps you should talk to Auspex or NetApp and > see what the NAS folk have to offer... maybe you're right on that, but currently, we have to test the FreeBSD thing, and set it up (because the hw is already here...)