Jason Haar writes:So when someone finds the exploit for the web server (perhaps a buffer overrun, or particular type of malformed request) and can run commands on the server, they have access to all the files in your LAN made available by NFS/MAPI/SMB? Sounds great...
What about them?On Sun, Nov 24, 2002 at 04:36:54PM -0500, Sam Varshavchik wrote:[EMAIL PROTECTED] writes:
>Well, there are quite a few installations where there are different >servers hosting mail services and web services.
That's what NFS is for.
What about DMZes?
No it's not. That's what firewalls are for. Firewall blocks all traffic to the web server, except port 80. Problem solved.Running NFS/MAPI/SMB from a DMZ to a LAN is not a good idea. The security implications are rather huge.
--
Bill Michell
[EMAIL PROTECTED] (home)
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
