Re: Shared drives through a firewall


Jim Harrison wrote:
You might consider using FTPS or SSH connections; they're relatively
secure, depending on the server/client package you select.

Webdav is under-promoted in these scenarios - it's built on top of a well-understood and easily securable protocol (http), and it has great crossplatform support. Webdav allows access either via a webdav client that supports writing (windows explorer and gnome/nautilus both do this, and OSX/KDE/$desktopofchoice probably do too) or a standard http client (ie, lynx, firefox). It supports well-understood mechanisms to encrypt traffic (TLS/SSL) and authenticate users (http basic auth).

It has good application layer support from a wide variety of reverse proxy/firewall products (including ISA) designed for protecting web traffic if you choose to expose it externally.

It's also fairly difficult to distinguish from a regular webserver, so it's far less likely to draw attention from attackers than opening up SMB ports, particularly if you had a webserver running anyway.

There's also been webdav support in IIS and in Apache for quite some time...

- James.

--
James (njan) Eaton-Lee | UIN: 10807960 | http://www.jeremiad.org

"The universe is run by the complex interweaving of three
elements: Energy, matter, and enlightened self-interest." - G'Kar

https://www.bsrf.org.uk | ca: https://www.cacert.org/index.php?id=3
--

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Relevant Pages

  • Re: how to publish an XBAP through IIS 7
    ... HTTP Error 404. ... Let's use webfetch to trace the rawdata of http request/response and check ... Microsoft Online Community Support ... initial response from the community or a Microsoft Support Engineer within ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: rsync over http?
    ... > There is WebDAV, and a davfs that implements remote file ... > sharing semantics via DAV (which in turn uses HTTP). ... WebDAV server testing and scripting. ... This Version supports HTTPS, including Client Site ...
    (comp.unix.questions)
  • RE: Writing A Web Browser.... Sort of...
    ... in ASP.NET which is still able to used in SPS server: ... Introduction to HTTP Modules ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Accessing web with a C program
    ... richard@xxxxxxxxxxxxxxx (Richard Tobin) writes: ... _should_ bypass the OS and support HTTP when the OS only gives ... mapping URLs to file names somehow (the mapping could be ...
    (comp.lang.c)
  • RE: Rendering a Calendar to a Web Page
    ... Along with Dave, I to am looking for a solution like this. ... I would like to read the web page refereing to WebDAV that you had mentioned but the link is dead. ... There are several object models that can be used to access Exchange data. ... Support Policy for Microsoft Exchange APIs with .NET Framework ...
    (microsoft.public.dotnet.general)