FreeNAS Public Host

[JOduMonT]

Hi everybody;

I was wondering what the opinion of the community about using FreeNAS as an Public Host, like an HyperVisor and hosting public service (linux/bsd) into jail.

All services from FreeNAS will be internal except SSH.

 

[jgreco]

As with any exposed service, it depends on how much you value your data, and what your tolerance for risk is. If you design jails properly and have a bastion firewall, there's much less risk than if you just install an unsecured FreeBSD image in a jail and put the FreeNAS on the public Internet. Your question is far too vague.

 

[JOduMonT]

I just wonder because in the documentation they mention put FreeNAS behind a firewall;
So might be my question was'nt clear : if you expose like into a DMZ your FreeNAS... as barebone..

And or if we compare FreeNAS vs TrueOS

Maybe you give me the answer;
could we manage firewall rules into FreeNAS ? because you mention bastion.
I means, more than basic rules like define IP, subnet, ...
Do you have a link for that ? Because a fast DuckDuck wasn't successful for me :(

Regards!

 

[jgreco]

Yes, FreeNAS supports ipfw. However, it is not advisable to have the FreeNAS box provide its own firewall. It isn't designed to do it, so there are potential failure modes that include inadvertently exposing your unprotected system to the Internet.

 

[JOduMonT]

Thank Greco;
from you, this answer gives mine too.