RE: NFS Over Private Network

On Thu, 25 Mar 2004, Simon Thornton wrote:

> At the least I would replace the SUN portmapper with the one from the
> TCPwrappers suite. This will allow you to restrict access
> (/etc/hosts.allow) on the IP level to portmap and therefore to some
> services.

[...snip...]

Actually, that's not really a good idea.  Take a look at this message from
Alex Noordergraaf on that subject.

--Msg--

Date: Thu, 06 Nov 2003 20:01:44 -0500
From: Alex Noordergraaf <[email protected]>
To: Jonathan Loran <[email protected]>
Cc: [email protected]
Subject: Re: Disabling rpcbind/portmapper

Jonathan Loran wrote:
>
> How about the libwrap version of rpcbind by Wietse Venema?  Simple
> /etc/hosts.{allow,deny} control.

Wietse's version of rcpbind is based on early Solaris code (~2.5) and
isn't generally recommended for production use anymore.

-Alex

--End--

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net