Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 15 Nov 1996 18:16:53 +0300
From:      marck@pluscom.cronyx.ru (Dmitry Morozovsky)
To:        freebsd-security@freebsd.org
Subject:   Re: NFS Server, is it secure?
Message-ID:  <199611151516.SAA07972@pluscom.cronyx.ru>

next in thread | raw e-mail | index | archive | help
Mark Newton wrote:

> Well, yes -- NFS is basically never "secure" on any platform.  The
> NFS protocol was never designed with security in mind.

> If you know (or can guess) the NFS filehandle for an NFS filesystem
> root then you can spoof the protocol for a start.  

> Firewall your NFS server:  Its services should not be reachable from
> the Internet-at-large.

Is NFS server with no exports with write permissions vulnerable too?

--

Sincerely,
D.Marck
========================================================================
=== D.Marck --- Dmitry Morozovsky --- marck@rinet.ru --- Wild Woozle ===
========================================================================



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199611151516.SAA07972>