[32329] in North American Network Operators' Group
Re: Operational impact of filtering SMB/NETBIOS traffic?
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Sun Nov 19 11:21:08 2000
Message-Id: <200011191619.eAJGJFw25344@black-ice.cc.vt.edu>
To: Roeland Meyer <rmeyer@mhsc.com>
Cc: "'Scott Call'" <scall@devolution.com>, nanog@nanog.org
In-Reply-To: Your message of "Sat, 18 Nov 2000 20:19:12 PST."
<47FE39302BF73B4C93BC84B87341282C1EF8@condor.lvrmr.mhsc.com>
From: Valdis.Kletnieks@vt.edu
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_340631816P";
micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date: Sun, 19 Nov 2000 11:19:15 -0500
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_340631816P
Content-Type: text/plain; charset=us-ascii
On Sat, 18 Nov 2000 20:19:12 PST, Roeland Meyer <rmeyer@mhsc.com> said:
> shares on the internet? We use SMB/Samba INSTEAD of NFS because we believe
> SMB to be more secure. smb.conf certainly gives more security options than
> exports does.
Don't confuse "more options" with "more security".
A protocol can have dozens of options, but yet be fundementally insecure.
--
Valdis Kletnieks
Operating Systems Analyst
Virginia Tech
--==_Exmh_340631816P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Exmh version 2.2 06/16/2000
iQA/AwUBOhf9gnAt5Vm009ewEQJhaACgzSKwUbV/ZfLpv3MEm7WPtl9HVq4AoNSf
kBm7dAQMZpr5BSY5I+gYmcaK
=5nTs
-----END PGP SIGNATURE-----
--==_Exmh_340631816P--