It seems domain isolation can be used to accomplish, but I'
d like a solution that doesn't require IPsec, or more accurately, doesn't require IPsec on the fileserver. IPsec if done in software has a large CPU overhead and our NAS boxes don't support any kind of offload.
The goal is to avoid authenticated users using
…