I'm looking to build my first nas. And i intend to connect over the internet to it.
Because i will have some work documents too on it i want to make it as secure as possible.
I have no particular preference for the nas OS (other than it be free).
The nas will have multiple users (2+the master which will only be allowed to log locally ) and each user will have certain MAC adresses associated with it ( including *). Depending on the (user,mac) the user will have certain permissions.
Furthermore i would like to prevent cases where my mac spoofed and the data eavesdropped or modified. So i'm thinking of the folowing scheme. The nas content is encrypted with a master key. When a certain (user,mac) requests data from, the data is decrypted and encrypted again with a key corresponding to (user,mac) table found on nas. The content is thus supposed to be sent encrypted over the internet and transparently decrypted on a device which 90% of the time will be a win7 pc.
What combination of tools can achieve this combination ( i could only think of a truecrypt +fuse-encfs but it does not achieve what i need) ? As an extra question what kind of security measure do you recommend or use for your network storage?
Regards,
CR