View previous topic :: View next topic |
Author |
Message |
m0llbuz_ n00b
Joined: 30 Jan 2003 Posts: 21
|
Posted: Fri Jan 31, 2003 4:42 am Post subject: Samba connection with SSH tunnel |
|
|
Hi!
What's the best way to connect to a file server over the Internet securely? Samba with an SSH tunnel? With "the best way" I mean security, performance and stability. Both the server and the client are Linux machines.
The reason I'm asking is because a friend (Java programmer) often works at home, and he always has to send his code back and forth using scp. He uses Eclipse, an open source IDE, where he creates projects. So he has to import the source code into his project at home. And vice versa.
I figured he could mount his projects directory at work on his computer at home. Then he can use the same Eclipse project both at work and at home. Or is this totally nuts? He has a 10 Mbit/s cable between his home and the office.
Cheers _________________ I used up all my sick days, so I'm calling in dead. |
|
Back to top |
|
|
punx n00b
Joined: 08 Jan 2003 Posts: 33 Location: Cologne_de
|
Posted: Fri Jan 31, 2003 9:27 am Post subject: Just to start somewhere |
|
|
Hi,
Client and Server are Linux - and they use samba?
You can tunnel NFS over ssh.
Very, very short just to give an Idea:
To Tunnel NFS, SSH performs a redirection of two local TCP-Ports to the TRCP Ports
of "nfsd" and "mountd" which belong to the NFS Server.
Next the NFS Client mounts the shares. so he (you) must know on which ports nfsd and mountd listen for connections:
Code: | rpcinfo -p NFS-Server | grep tcp |
Now SSH has to redirect two free localports to that ports the command above shows:
Code: | ssh -L LocalNFS:NFS-Server:RemoteNFS \
-L LocalMount:NFS-Server:RemoteMount \
-c blowfish User@NFS-Server |
Now the its Client Time:
Code: | mount -t nfs -o tcp,MoreOptions,\
port=localNFS,mountport=LocalMount\
localhost:/Export/of/Server /Mountpoint |
or you edit a "ssh-nfs-fstab" to do that:
Code: | localhost:/export/home /mnt/sshmnt nfs,tcp,intr,bg,port=2002, mountport=2030,usr,noauto 0 0 |
Well, its not really easy and not really hard to do that.
You need to gather more Information maybe you can start here:
NFS: http://nfs.sourcefourge.net/
Kernel: http://www.fys.uio.no/~trondmy/src/ (kernel patches)
SecureNFS (snfs): http://www.math.ualberta.ca/imaging/snfs/
Or try google with: nfs ssh tunnel
Dont |
|
Back to top |
|
|
m0llbuz_ n00b
Joined: 30 Jan 2003 Posts: 21
|
Posted: Sat Feb 01, 2003 7:38 pm Post subject: |
|
|
Thanx! Great info!
I will try it out, hopefully it won't be too slow.
Cheers! _________________ I used up all my sick days, so I'm calling in dead. |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|