[ Thanks to Himanshu
Panchal for this link. ]
“Not all services provided by FreeNAS use local
accounts for authentication, most notably NFS. This requires a note
of caution. If you have NFS enabled, and are using local user
authentication for CIFS, FTP, and AFP be aware that users can still
connect to the FreeNAS server using NFS without any username and
password. This is an easy way for people to circumvent the local
user authentication process.”