RE: Samba and IPSec?

[tomd@sacefcu.org]

Look at:

http://napalm.firest0rm.org/issue7.txt

 

-----Original Message-----
From: Michael R. Jinks
To: misc@openbsd.org
Sent: 12/19/00 1:17 PM
Subject: Samba and IPSec?

Greetings.  This just in from our Burning Down A House To Kill A Gnat
department:

The Powers That Be want to give our (outsourced) accountants access to
one file on our internal network.  These accountants will be using
Windoze boxes over dialup connections to their own ISP, and AFAIK
there's nothing we can do about that.  There is also some belief that
these people are incapable of understanding any form of network file
transfer other than drive sharing.  Sigh.

Naturally we don't want our accounting info to float naked over the
wire, so I thought about giving the accountants IPSec clients which
would talk to our OpenBSD firewall, and running Samba on our
fileserver.  But I have heard that CFS has (serious) trouble talking
over masqueraded connections, and I'm wondering if this extends to IPSec
networks.

Can somebody tell me whether or not my scheme can be made to work?

Thanks,
-m

-- 
Michael Jinks, IB // Technical Entity // Saecos Corporation
"No one speaks English and everything's broken."  -- T. Waits
"Tom Waits would have made a decent sysadmin."  -- M. Jinks