Security: NFS or Samba?

[Daniel Pittman]

marcus <lists at wordit.com> writes:
> On Wednesday 11 October 2006 09:50, Billy Pollifrone wrote:
>> I assume the DSL router has a firewall enabled, so unless you give
>> access to the outside world to use, the NFS share, then you don't
>> have a problem.
>
> Yes, the DSL router's firewall is enabled.
>
> Does this mean I don't need to set any firewall rules on the PC hosting 
> the NFS shares? I guess I would allow NFS (and NIS?) access in the 
> local zone?
>
>> The bigger concern is to limit the wifi, which you seem to have
>> covered. I go further and limit my wifi access by hardware address as
>> well myself.
>
> Do you mean the MAC address?  I did enable that and added the laptop
> to the list. However, I read on some other Linux forum (old thread)
> that it's easy to find the MAC addresses being used and then spoof
> them, i.e. an outsider can broadcast a valid MAC address.  Any more
> info on that?

That is essentially true.  It will prevent casual attacks and, for most
people, that is enough to make some other attack (like, say, breaking in
and stealing your computer) less costly than someone trying to break
through the MAC filter.

Regards,
        Daniel
-- 
Digital Infrastructure Solutions -- making IT simple, stable and secure
Phone: 0401 155 707        email: contact at digital-infrastructure.com.au
                 http://digital-infrastructure.com.au/