[ale] NFS permssions

[Keith Hopkins]

David Corbin wrote:
> I would like to export an NFS file-system, and grant access to all IPs 
> on a sub-net, except one (the router/firewall).  How would people 
> suggest the best way to do this?
> 

One of two ways:

(userland nfsd, not kernel nfsd)
/etc/exports
mountpoint	firewall-ip(noaccess) *.your.lan(ro)

more secure (and works for kernel nfsd), block NFS from your firewall-ip on the NFS server using iptables.

-- 
Lost in Tokyo,
   Keith


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale