Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 22 Jul 2001 20:25:32 -0400 (EDT)
From:      Jim Durham <durham@w2xo.pgh.pa.us>
To:        Peter Chiu <pccb@yahoo.com>
Cc:        serkoon <serkoon@thedarkside.nl>, <freebsd-security@FreeBSD.ORG>
Subject:   Re: rpc.statd attacks
Message-ID:  <Pine.BSF.4.33.0107222022580.2632-100000@jimslaptop.int>
In-Reply-To: <11065209255.20010722201224@ipfw.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 22 Jul 2001, Peter Chiu wrote:

> Hello Jim,
>
> SYNOPSIS
>      portmap [-d] [-v] [-h bindip]
>
> You can just bind it to your internal IP.
>
>
> Sunday, July 22, 2001, 8:07:38 PM, you wrote:
>
>
> JD> On Sun, 22 Jul 2001, serkoon wrote:
>
> JD> I'm using NFS internally, so I need portmapd and 111 udp is
> JD> blocked. That's what is bothering me..
>
> --
OK, I was unaware of *that*, but it did remind me of something
else... I *do* have portmap in my hosts.allow for LAN addresses
only (I'm running natd with private addresses on the LAN, and all NFS
stuff flows on those addresses). I'll also do what you suggested.

-Jim



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0107222022580.2632-100000>