Curious how people would approach this scenario.
We have someone onsite who needs fast (gig ethernet level) access to large files stored "somewhere" which are being exchanged/collaborated on in realtime with someone who works for us.
We don't want the guy we trust to have any access to our network so he'll be working in an area with no network ports patched to our LAN just back to the comms cab in that area.
My thoughts are dump a Synology NAS with 2 NICs in the comms cupboard and dual-home it and use the Synology firewall (iptables I guess?) to only allow SMB/CIFS access from the "dirty" side with the other NIC on our LAN.
I guess we're ultimately relying on the Synology's OS not to be able to bridge.
Sound reasonable depending on how much tin foil I have on my head?
