Incremental file updates over a network, NFS?
Mac User FR
macuserfr at free.fr
Fri Mar 14 14:54:03 GMT 2008
You gave you the answer.
I'm not a security specialist, but by my modest knowledge, rsync
protocol isn't secure at all as all information can be sniffed by
somebody on the network. So the "classic" solution for those who need
encryption is to use ssh wrapper.
On the links of this page: http://troy.jdmz.net/rsync/index.html you
have an option for stunnel instead of ssh ( http://www.netbits.us/
docs/stunnel_rsync.html ). As I neither use one or other, I can't
give you more info. Try googling around or wait for a more "pro" answer.
Vitorio
Le 14 mars 08 à 15:00, Andy Smith a écrit :
> Ok, thanks for the info. That seems to open up the issue of network
> security (yes NFS security normally isnt great, but...)
>
> rsyncd native: is this bug free and secure (based on hosts_allow/
> hosts_deny?), perhaps a good solution with tcpwrappers?
> rsh: no thanks
> ssh: dont really want to have to put public private keys on systems
> to allow non interactive logons
>
> Any comments on the above assesment or advise from others regarding
> security?
>
> thanks Andy.
> Rsync works on a client/server system. So it's recommended to
> install rsync on both machines (your and the server), so you bypass
> NFS and connect to the server via rsync protocol. That's the way to
> use the delta incremental algorithm.
> --
> To unsubscribe or change options: https://lists.samba.org/mailman/
> listinfo/rsync
> Before posting, read: http://www.catb.org/~esr/faqs/smart-
> questions.html
-------------- next part --------------
HTML attachment scrubbed and removed
More information about the rsync
mailing list