[OpenAFS] AFS in the age of the wild west internet

[Steve Gaarder]

While I really like the concept of AFS as a world-wide filesystem, I'm 
starting to wonder if it's a good idea in the modern age of cyberattacks.
How safe is it to leave AFS open to the world?

Some of the data we store in AFS does not need to be accessed from outside 
of our network; is there a good way of blocking access to it from 
outside while preserving access to other data in the cell?

thanks,

Steve Gaarder
System Administrator, Dept of Mathematics
Cornell University, Ithaca, NY, USA
gaarder@math.cornell.edu