From: Matthew George (mdgsecureworks.net)
Date: Wed Jul 30 2003 - 12:21:43 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Greetings

I'm running an NIS server that I would very much *not* want to be
accessible on some of its interfaces. portmap can be instructed to bind
to specific addresses using the -h flag, but this seems to break ypbind.

ypbind will attempt to find a server by issuing a broadcast rpc request to
the local network. When portmap is not bound to INADDR_ANY, it will not
reply to these requests.

I'd rather not have to run ypset on clients where this condition exists
with their local NIS servers, and I'd really like to not have portmap
bound on certain interfaces. I could filter it of course, but I was
hoping someone had another option that they were aware of ...

TIA

--
Matthew George
SecureWorks Technical Operations
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]