Incremental file updates over a network, NFS?

Mac User FR macuserfr at free.fr
Fri Mar 14 14:54:03 GMT 2008


You gave you the answer.
I'm not a security specialist, but by my modest knowledge, rsync  
protocol isn't secure at all as all information can be sniffed by  
somebody on the network. So the "classic" solution for those who need  
encryption is to use ssh wrapper.

On the links of this page: http://troy.jdmz.net/rsync/index.html you  
have an option for stunnel instead of ssh ( http://www.netbits.us/ 
docs/stunnel_rsync.html ). As I neither use one or other, I can't  
give you more info. Try googling around or wait for a more "pro" answer.

Vitorio

Le 14 mars 08 à 15:00, Andy Smith a écrit :

> Ok, thanks for the info. That seems to open up the issue of network  
> security (yes NFS security normally isnt great, but...)
>
> rsyncd native: is this bug free and secure (based on hosts_allow/ 
> hosts_deny?), perhaps a good solution with tcpwrappers?
> rsh: no thanks
> ssh: dont really want to have to put public private keys on systems  
> to allow non interactive logons
>
> Any comments on the above assesment or advise from others regarding  
> security?
>
> thanks Andy.
> Rsync works on a client/server system. So it's recommended to  
> install rsync on both machines (your and the server), so you bypass  
> NFS and connect to the server via rsync protocol. That's the way to  
> use the delta incremental algorithm.
> -- 
> To unsubscribe or change options: https://lists.samba.org/mailman/ 
> listinfo/rsync
> Before posting, read: http://www.catb.org/~esr/faqs/smart- 
> questions.html

-------------- next part --------------
HTML attachment scrubbed and removed


More information about the rsync mailing list