FreeNAS and jails

[thegreek1]

Hi,

I wanted to created a seed box and want to keep it seperate from my own home files. Would Jails be able to restrict a bittorrent client with read access to that specific volume/mount point? I want to make this secure as possible as I don't want the world to see everything.

 

[Kris Moore]

Yep, with a jail you only expose the dataset / mount that you want it to see, and that protects the rest of your system from whatever you got running inside that jail.

 

[Samuel Tai]

You can try mounting a dataset read-only within your BitTorrent jail, but generally, it's a bad idea to expose your NAS, or any parts thereof, directly to the Internet.

 

[thegreek1]

@Samuel, if I had to expose part of it as a seed client, how would you go about locking it down ?

 

[Samuel Tai]

I wouldn't. I would create a cloud TrueNAS server, and transfer the files out there. If that gets compromised, it's no big loss. Just spin it down and spin it back up again.

 

[sretalla]

if I had to expose part of it as a seed client, how would you go about locking it down ?

A good firewall and a reverse proxy in front of it.