[tlug] network file system recommendations

["J. David Beutel" <jdb@example.com>]

At home, I'm using an old machine as a firewall and mail server, as well
as a web server and servlet container real soon now.  I want another
machine on my internal LAN to incrementally backup the files from the
firewall (to HDD and/or CD-R/W) and run tripwire on them from time to
time.

So I'm thinking of running a networked file system from my firewall to my
internal LAN.  Is this a reasonable strategy (for convenience, security,
etc)?  Should I use NFS, Samba, or something else?  I'd like to have Samba
on at least a subdirectory, for when I occasionally use Windows,
especially on my little, old notebook.  But I want to limit worm access, 
especially from Windows.  So I need to export most of the firewall's 
directories read-only, and use protocols that are reasonably secure.

Any recommendations?  (My "firewall" is running RedHat 7.3, and the other 
machine is running RedHat 9 now.)  (I don't even know if tripwire will 
work this way.  Maybe I should run tripwire off a local CD-ROM instead?)

Thanks,
11011011