[lug] NFS

[Wayde Allen]

On Thu, 18 Nov 1999, Pedersen, Michael J wrote:

> > 5.) Any tips/info on configuring NFS would be great.
> 
> If at all possible, don't.  It's considered one of the biggest security
> holes you can have. If you MUST install it, configure a firewall, and put
> the NFS machines behind it, and review every security alert you can find on
> it to lock it down.  Outside of that, there's a lot to it, but you can find
> some pretty good info by reviewing 'man exports'.

This is the second time I think I've heard someone mention NFS as a
security hole before.  The question that comes to mind is:  if this is
true, what is the replacement or fix?  Samba ... ?

- Wayde
  (wallen at boulder.nist.gov)