Bugtraq mailing list archives

Re: NFS exporting


From: perry () snark imsi com (Perry E. Metzger)
Date: Thu, 14 Apr 1994 13:34:13 -0400


smb () research att com says:
        A while back I saw some discussion about NFS using tcp instead of
        udp. Would this make things any more secure?

Yes, considerably; it's much harder (though by no means impossible)
to butt in to the middle of a TCP session.

I'll note that that Steve is pointing out that TCP makes spoofing
harder -- it does nothing about stealing file handles (as I'm certain
he knows.)

Perry



Current thread: