From owner-freebsd-questions@FreeBSD.ORG  Tue Jan 25 12:51:06 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C04DC16A4D5
	for <freebsd-questions@freebsd.org>;
	Tue, 25 Jan 2005 12:51:06 +0000 (GMT)
Received: from fw.farid-hajji.net (fw.farid-hajji.net [213.146.115.42])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4142E43D5E
	for <freebsd-questions@freebsd.org>;
	Tue, 25 Jan 2005 12:51:06 +0000 (GMT)
	(envelope-from cpghost@cordula.ws)
Received: from [192.168.254.10] (unknown [192.168.254.10])
	by fw.farid-hajji.net (Postfix) with ESMTP id 0938F4B000
	for <freebsd-questions@freebsd.org>;
	Tue, 25 Jan 2005 13:46:16 +0100 (CET)
Message-ID: <41F640BA.2040707@cordula.ws>
Date: Tue, 25 Jan 2005 13:51:06 +0100
From: cpghost <cpghost@cordula.ws>
User-Agent: Mozilla Thunderbird 1.0 (X11/20050122)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Restricting NFS daemons
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Jan 2005 12:51:06 -0000

Hello,

how can one configure NFS daemons (esp. mountd and rpcbind) so that they 
listen
only on one IP address (e.g. on 192.168.1.1)?

1. nfsd's -h flag works great.

2. rpcbind's -h flag doesn't seem to work. rpcbind listens on the interfaces
specified by -h, but, according to 'sockstat -4l' also on *.111 and
*.<some-random-port>.

3. mountd doens't have a flag at all for this. -p can specify a port,
but not an IP address. It opens a port on *.<some-random-port>.

Any ideas?

Thanks,
-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/