Arch Linux

Scriptor

Member

Registered: 2011-01-16

Posts: 146

[SOLVED] NFS and remote access

Hello,

I am trying to set up an nfs server and being able to access it remotely (from outside it's private network), using nfs v4. I am able to access it from private network.

The problem lies with the authentication. In the /etc/exports an ip adress or host is needed. I wonder then how it is possible to set up the address/host in order to access remotely ?

Thank you very much in advance for your help.

Last edited by Scriptor (2020-06-11 09:59:53)

schard

Forum Moderator

From: Hannover

Registered: 2016-05-06

Posts: 2,703

Website

Re: [SOLVED] NFS and remote access

Did you read the exports man page?
An IP address is not necessary.
You can instead use wildcards.
However, setting up NFS outside of a secure network seems like a very bad idea.
I think that NFS4 can use Kerberos for authentication, but you explicitely need to set it up.
I only use NFS over VPNs, even in local networks, since it's so easy to attack.

---

Inofficial first vice president of the Rust Evangelism Strike Force

Scriptor

Member

Registered: 2011-01-16

Posts: 146

Re: [SOLVED] NFS and remote access

Thank you very much for your enlightenment.

How about samba ? Or is Kerberos with NFS just as good ?

schard

Forum Moderator

From: Hannover

Registered: 2016-05-06

Posts: 2,703

Website

Re: [SOLVED] NFS and remote access

If you correctly setup NFSv4 with Kerberos authentication and transport encryption it should be okay to use it over the internet.
Be sure you follow up-to-date intructions from either the official Arch Wiki or Kerberos / NFS documentation.
Samba on the other hand is a big no-no for use in insecure networks. Remember Eternal Blue?

I, however wonder, what your goal really is, since you seem to have an XY-issue here.
If you just want to securely share files over the internet, you might also want to look into SFTP, which is arguably much easier to setup securely.

Last edited by schard (2020-06-11 09:40:20)

---

Inofficial first vice president of the Rust Evangelism Strike Force

Scriptor

Member

Registered: 2011-01-16

Posts: 146

Re: [SOLVED] NFS and remote access

Thank you for your great answer.