Rsync security grab bag?

Discussion on remote replication.
Post Reply
aarbee
Easy as a breeze
Posts: 298
Joined: Wed Feb 16, 2011 4:54 am

Rsync security grab bag?

Post by aarbee » Sat Jan 12, 2019 2:03 am

I have a situation with a few Qnaps. Being from me, or from customers and tried to connect 2 with Rsync.
I have 3 Qnaps myself. 2 On location, 1 on a remote location for backup only.
My customer is having 3 different Qnaps as well.

My setup:
Mainbox: 673
Extra: 219Pii
Remote 239

Customer:
Mainbox 453
Extra 219Pii
Extra 219

If my customer connects with any of his Qnaps to my 673 he only sees the Share that I have prepared.

If I connect to my customers 219Pii from my mainbox, I see all his Shares and can even open them.
I have checked his settings, and they are equal to mine. I should not see all his shares.
The same with all his other Qnaps.

Now comes the strange part, None of his Qnaps see more than the prepared Share.
If I check with a special rsync user my mainbox, from my remote 239, I see all the shares.
I cannot understand why that is. To us this whole Linux security feels like a big grab box.
As the user I use here is exactly the same as my customer connects to my 673.
The only difference there is, is that the remote 239 is connected via a lan2lan vpn between 2 Draytek routers.

I think I miss some knowledge here.
Thanks ahead.
Friendly Greetings,

RobB

Model: TvS-673 40GB (2*32+2*4) - 20170215
Disks Raid 6: 2.5" 5x WD red 1TB active, 1 spare(nasware2/Nasware3)
Cache: Cache SSD: Crucial M.2 275GB 2x
UPS: Back-UPS Pro BR900G-GR
---
Model: TS-239 PRO II - Raid 1: 2x WD Red 4TB
Model: TS-219P II+ - Raid 1: 2x HGST Deskstar-nas 3TB

Reserve 1x HGST Deskstar-nas 4TB
-----------------------------------------------------------------------------------------------------------------------------------------
Media Boxe: Nvidia ShieldTV Pro
-----------------------------------------------------------------------------------------------------------------------------------------
My it weblog ( http://www.nononsensecomputer.nl

Post Reply

Return to “Remote Replication/ Disaster Recovery”