<meta http-equiv="Content-Type" content="text/html;
<body text="#000000" bgcolor="#FFFFFF">
<p>Hah, we the opposite problem. We have a resident FireWall Nazi,
who is involved when boxes go online.<br>
<p>You practically have to have a court order to be able to open up
a port on any box/instance, no matter how restricted <grin><br>
"No port for you!"<br>
<div class="moz-cite-prefix">On 1/19/2017 2:30 PM, Kevin Lemonnier
<pre wrap="">On the newer versions, I was under the impression that NFS was
deprecated in favor of Ganesha?
Ah yes, I saw that Ganesha was available for debian now, still
haven't had the time test that out. Looked interesting though
Is that turned on by default?
Don't know after that but I can tell you it is turned on
by default on 3.7 and 3.8, I've used it a bunch for migrating
across clusters quickly :)
I just drop everything on the wan port and accept everything
on the lan port, so I'm not really concerned by firewall anymore.
But that's very dependent on the setup ofcourse, and it did take
me months before realising anyone on the Internet could mess
with our datas by just mounting the volume from anywhere.
We've been insanely lucky no one has, I feel
the "gluster shouldn't be used on internet so we don't care" way
of choosing the defaults is very very dangerous, and
should probably be written in big fat red letter in the doc.
Maybe it is and I just missed it though, but I'm pretty sure
I'm not the only one.
Gluster-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Glusteremail@example.com">Glusterfirstname.lastname@example.org</a>
<a class="moz-txt-link-freetext" href="http://lists.gluster.org/mailman/listinfo/gluster-users">http://lists.gluster.org/mailman/listinfo/gluster-users</a></pre>