Re: NFS exporting

mreprimus.com

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Ken Hardy: "Re: chrooted superuser (was wu-ftpd info.)"
• Previous message: smbresearch.att.com: "Re: NFS exporting"
• In reply to: Perry E. Metzger: "Re: NFS exporting"
• Next in thread: Aggelos D. Keromitis: "Re: NFS exporting"

On Wed, 13 Apr 1994, Perry E. Metzger wrote:

> As for NFS in general, its useless. As soon as you export an NFS
> partition to the net (at least if you export it writable), you can
> kiss your machine goodbye. Among other nasty tricks, even without the
> mountd giving you any informaiton on the host you can just flood the
> machine with unlink requests or guess inode generation numbers or
> other such things. NFS is a hunk of junk.

You can block NFS (2049) at the router.  But that doesn't stop
internal ways of getting root on machines running NFS / breaking into
machines from the internal network.

Mike

• Next message: Ken Hardy: "Re: chrooted superuser (was wu-ftpd info.)"
• Previous message: smbresearch.att.com: "Re: NFS exporting"
• In reply to: Perry E. Metzger: "Re: NFS exporting"
• Next in thread: Aggelos D. Keromitis: "Re: NFS exporting"