In FreeBSD example ipfilter setting, I can see that
requests from
192.168.0.0/16 are blocked (referening RFC1918)
This seems to impose a nuisance on some private network intercom, so I comment it out.
Then I want to allow, say, pings from the local hosts;
I do it by allowing incoming pings from
192.168.0.0/24.
Is there a security risk doing it like this? This notation basically includes the router too, but as I understand it, it will not allow source addresses from the WAN side.
I am accessing Unix-like NFS servers using Client for NFS in Windows Server 2008 R2.
Since the server is not part of AD, and there is no "User Mapping server" active, the documentation states that the client uses anonymous UIDs and GIDs of -2, -2.
Now, on the server side, NFS exports have -mapall= option specified.
Why is it then that a file object with Unix permissions 700 gets access denied? With more relaxed permisssions, access is okay, but if mapall maps all remote users to the specified local user credential (as per the manpage), why do 700 permissions not allow for this?