David wrote regarding 'Re: [SLE] Interesting Samba Question...' on Mon, Aug 23 at 09:12:
On Mon, Aug 23, 2004 at 04:59:41PM +0300, Chris Roubekas wrote: [snip]
He has a Laptop running Win-2000 and he wants to connect and map all drives of the Samba server over the internet. i.e. be able to work from anywhere practicaly in the world as if he is at the office. Internet services are not my concern at this point.
[...]
You want to set up a VPN, so his laptop appears to be part of your LAN, [...] Make sure the user is clued up on proper IT security, so that their laptop doesn't become a way to bypass your firewalling (e.g. user gets virus from open internet, then connects to your LAN, transferring it in).
Ideally, you want to firwall the VPN connections so that they're treated more like "kinda trusted but not really" rather than either "completely untrusted internet" or "trusted completely LAN". That's something to keep in mind when setting the VPN up... --Danny