From owner-freebsd-net@FreeBSD.ORG Tue Apr 24 18:43:57 2007 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 9DDD516A401 for ; Tue, 24 Apr 2007 18:43:57 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from mail-out4.apple.com (mail-out4.apple.com [17.254.13.23]) by mx1.freebsd.org (Postfix) with ESMTP id 87E5F13C44B for ; Tue, 24 Apr 2007 18:43:57 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from relay6.apple.com (relay6.apple.com [17.128.113.36]) by mail-out4.apple.com (8.13.8/8.13.8) with ESMTP id l3OIhtkR020681; Tue, 24 Apr 2007 11:43:55 -0700 (PDT) Received: from relay6.apple.com (unknown [127.0.0.1]) by relay6.apple.com (Symantec Mail Security) with ESMTP id B394F10071; Tue, 24 Apr 2007 11:43:55 -0700 (PDT) X-AuditID: 11807124-a149ebb000000872-9d-462e4feb042a Received: from [17.214.13.96] (cswiger1.apple.com [17.214.13.96]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by relay6.apple.com (Apple SCV relay) with ESMTP id 9E4DF10046; Tue, 24 Apr 2007 11:43:55 -0700 (PDT) In-Reply-To: <001d01c7869d$16bcd510$0202a8c0@artemis> References: <001d01c7869d$16bcd510$0202a8c0@artemis> Mime-Version: 1.0 (Apple Message framework v752.2) X-Priority: 3 (Normal) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Chuck Swiger Date: Tue, 24 Apr 2007 11:43:54 -0700 To: Alexandre DELAY X-Mailer: Apple Mail (2.752.2) X-Brightmail-Tracker: AAAAAA== Cc: freebsd-net@freebsd.org Subject: Re: NFS with Dynamic IP clients X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Apr 2007 18:43:57 -0000 On Apr 24, 2007, at 11:19 AM, Alexandre DELAY wrote: > I am searching for a solution to my problem. > I have a fixed NFS server connected to Internet. Clients have > dynamic IP > addresses. How can I secure clients NFS connections? Setup and use a VPN so that the clients appear to be on a trusted internal subnet which the NFS fileserver permits? -- -Chuck