Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Jul 2001 19:42:10 +0200 (CEST)
From:      "Janusz Mucka (Defacto)" <gdef@cvd.pl>
To:        Peter Pentchev <roam@orbitel.bg>
Cc:        <gdef@polychrome.durny.com>, <freebsd-security@FreeBSD.org>
Subject:   Re: RPC opens ports on all aliases
Message-ID:  <Pine.BSF.4.33.0107271940410.47470-100000@cvd.pl>
In-Reply-To: <20010727195308.D1105@ringworld.oblivion.bg>

next in thread | previous in thread | raw e-mail | index | archive | help

Yes, I know about that.

portmap_flags="-h 10.10.10.1"
nfs_server_enable="YES"
nfs_server_flags="-u -n 1 -h 10.10.10.1"

No effect. There are still open TCP ports on all aliases

Defio

> Yes; provide the necessary command-line options to the various servers.
> For example, the nfsd(8) manual page documents a -h option, which
> specifies an IP address to bind to.  The portmap(8) manual page also
> documents an -h option.
>
> You can pass command-line options to the servers on startup by
> adding the corresponding variable definitions in your /etc/rc.conf file.
> You can see all the available variables by either reading the rc.conf(5)
> manual page, or looking through the /etc/defaults/rc.conf file.
>
> DO NOT modify the /etc/defaults/rc.conf file!  Simply reassign
> the variables you need in /etc/rc.conf.
>
> For portmap(8) and nfsd(8), the appropriate variables are
> portmap_flags and nfs_server_flags.
>
> G'luck,
> Peter
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0107271940410.47470-100000>