Comments on: StorageCrypter Ransomware: Security Threat or Clickbait?

By: Robb Aley Allan

Robb Aley Allan — Fri, 12 Jan 2018 03:09:25 +0000

ZFS properties are effectively environmental variables that can be set uniquely for each file system, as opposed to a login environment. So setting the “exec” property off for a filesystem prevents application programs from being executed from anywhere in that filesystem.

By: Kal

Kal — Fri, 12 Jan 2018 01:16:35 +0000

In reply to Joon Lee. I run pfblocker NG (Geo IP fensing), IPSec tunnel and Openvpn on my pfsense appliance to access my NAS remotely

By: Joon Lee

Joon Lee — Wed, 27 Dec 2017 01:07:10 +0000

In reply to Sílvio Domingos. We agree. This is an important topic and we will discuss how to best address it.

By: Sílvio Domingos

Sílvio Domingos — Tue, 26 Dec 2017 20:03:59 +0000

Thanks for the article and the amazing work with FreeNAS and TrueNAS.
I never found any information about these two topics:
“If you need to grant remote access to your system for administrative reasons such as remote replication, do so using a combination of a GeoIP-aware firewall and a Virtual Private Network”
And
“Set the “exec=off” OpenZFS property on your shares to prevent malware execution”
Is there any documentation where i can read more about that, i’m planning to buy a TrueNAS and set up my current FreeNAS machine for remote replication but i’m a little concerned about security.
Best regards,
Sílvio Domingos