Re: IPMasqing NFS

2001-05-15 Thread Mike Fedyk
On Mon, May 14, 2001 at 05:19:36PM -0500, Bud Rogers wrote: > On Monday 14 May 2001 17:07, Chris Majewski wrote: > > > I'm going through a gateway/firewall which does port forwarding / > > ipmasq / NAT / ... Isn't "VPN" just microsoft terminology for exactly > > that, or is it something else

Re: IPMasqing NFS

2001-05-14 Thread Peter Hicks
On Monday 14 May 2001 15:11, Chris Majewski wrote: > "Lance Hoffmeyer" <[EMAIL PROTECTED]> writes: > > I would do this by setting up a Web Server (Apache), perhaps with SSL > > support. This is what I did on my machine to listen to MP3's. This way > > only certain directories are accessible and y

Re: IPMasqing NFS

2001-05-14 Thread Bud Rogers
On Monday 14 May 2001 17:07, Chris Majewski wrote: > I'm going through a gateway/firewall which does port forwarding / > ipmasq / NAT / ... Isn't "VPN" just microsoft terminology for exactly > that, or is it something else? I think VPN implies end to end encryption as well. And I think M$

Re: IPMasqing NFS

2001-05-14 Thread Chris Majewski
"Lance Hoffmeyer" <[EMAIL PROTECTED]> writes: > I would do this by setting up a Web Server (Apache), perhaps with SSL > support. This is what I did on my machine to listen to MP3's. This way only > certain > directories are accessible and you can password protect these directories. > Yeah th

Re: IPMasqing NFS

2001-05-14 Thread Chris Majewski
Mike Fedyk <[EMAIL PROTECTED]> writes: > You can export nfs from home as read-only and that may work ok. I can't > give you an exact port number because I haven't tried this myself, and I > believe nfsd's port changes. > > run netstat and grep for udp listening sockets, on your nfs server. > >

Re: IPMasqing NFS

2001-05-11 Thread Mike Fedyk
On Fri, May 11, 2001 at 10:24:52AM -0500, Lance Hoffmeyer wrote: > I would do this by setting up a Web Server (Apache), perhaps with SSL > support. This is what I did on my machine to listen to MP3's. This way only > certain > directories are accessible and you can password protect these direct

Re: IPMasqing NFS

2001-05-11 Thread Lance Hoffmeyer
I would do this by setting up a Web Server (Apache), perhaps with SSL support. This is what I did on my machine to listen to MP3's. This way only certain directories are accessible and you can password protect these directories. Lance > I'm at work, I would like to mount home_machine:/var/m

Re: IPMasqing NFS

2001-05-10 Thread Mike Fedyk
On Thu, May 10, 2001 at 11:44:14AM -0700, Chris Majewski wrote: > Mike Fedyk <[EMAIL PROTECTED]> writes: > > Until you know how to use these tools, you shouldn't even try to do this: > > > > lsof > > netstat > > tcpdump > > Sure. > > > nfs protocol and security considerations. > > NFS is insec

Re: IPMasqing NFS

2001-05-10 Thread Chris Majewski
Thanks for the feedback, but none of this tells me how to run nfs over ipmasq/ipchains.. -chris "Stephen E. Hargrove" <[EMAIL PROTECTED]> writes: > On 10 May 2001, Chris Majewski wrote: > > > > I'm at work, I would like to mount home_machine:/var/mp3, so I can > > listen to my mp3's. Not a

Re: IPMasqing NFS

2001-05-10 Thread Stephen E. Hargrove
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10 May 2001, Chris Majewski wrote: > > I'm at work, I would like to mount home_machine:/var/mp3, so I can > listen to my mp3's. Not a lofty goal, but would be nice pull off at > least as proof of principle. If I can do it without compromising

Re: IPMasqing NFS

2001-05-10 Thread Chris Majewski
Mike Fedyk <[EMAIL PROTECTED]> writes: > Until you know how to use these tools, you shouldn't even try to do this: > > lsof > netstat > tcpdump Sure. > nfs protocol and security considerations. NFS is insecure. My assumption is that by NFS-mounting, at work, stuff which lives on my home machi

Re: IPMasqing NFS

2001-05-09 Thread Mike Fedyk
On Wed, May 09, 2001 at 02:12:38PM -0700, Chris Majewski wrote: > Mike Fedyk <[EMAIL PROTECTED]> writes: > > > Try rpcinfo, if that won't get through, you need to make sure that you let > > through the statd port. > > Here's what rpcinfo says: > [okocim]13:55:34[/etc]$ rpcinfo gw.krzys.com > rp

Re: IPMasqing NFS

2001-05-09 Thread Chris Majewski
Mike Fedyk <[EMAIL PROTECTED]> writes: > On Tue, May 08, 2001 at 08:54:26PM -0700, Krzys Majewski wrote: > > I would like to NFS-mount a directory on a remote host located behind > > an > > ipmasq'ing gateway/firewall. The gateway runs 2.2.17, the remote box > > runs 2.4.2, the local box

Re: IPMasqing NFS

2001-05-09 Thread Mike Fedyk
On Tue, May 08, 2001 at 08:54:26PM -0700, Krzys Majewski wrote: > I would like to NFS-mount a directory on a remote host located behind an > ipmasq'ing gateway/firewall. The gateway runs 2.2.17, the remote box > runs 2.4.2, the local box runs SunOS-5.8-i386. I tried adding trivial > rules t