Re: limit access to other LAN computers

[Arkadiusz Mańko (ArMan) <areksmanko () o2 pl>]

Hi,

There's no other way than put both of this Linux machines in separate DMZ. Then limit the access to inside LAN by 
firewall rules. 

(Internet)
   |
   |
   |
(firewall)-----(dmz)-------linux
   |
   |
(LAN)----windows machines


Forget about NFS from outside (like Internet) - SSH/SFTP is only solution (don't give root access for that, create 
additional users, they can "su" to root after login).

regards,

ArMan



Dnia 26 kwietnia 2010 20:20 Antão Miguel Chantre <chantre () sisp cv> napisał(a):

> Hi,
> Try to use NFS Server and Client
> Thanks
> Antao Chantre
>
> ----- Original Message ----- 
> From: <nsantos.pessoal () gmail com>
> To: <security-basics () securityfocus com>
> Sent: Thursday, April 22, 2010 9:57 AM
> Subject: limit access to other LAN computers
>
>
> > Hello,
> >
> > We have 2 Linux machines (CentOS) which are accessed from outside by one 
> > of our clients. The rest of our network is Windows machines.
> > We do not use domains, for now. (small network)
> >
> > What is the best way to make those clients access only the machines they 
> > need to work and no other computer on the network?
> >
> > They have administrator rights on the Linux machines.
> >
> > Thanks in advance,
> > Nuno Santos
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL 
> > certificate.  We look at how SSL works, how it benefits your company and 
> > how your customers can tell if a site is secure. You will find out how to 
> > test, purchase, install and use a thawte Digital Certificate on your 
> > Apache web server. Throughout, best practices for set-up are highlighted 
> > to help you ensure efficient ongoing management of your encryption keys 
> > and digital certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------ 
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------