[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sheflug] inetd




> 
> 	In the particular case of NFS, you can do that directly on
> /etc/exports. Most of the daemons launched by inetd let you have a nice
> control of who should do what. However, xinetd might be a better option
> if you have more than 3 daemons :)
> 

Note though if you have a locked down hosts.allow, you need a specific entry 
in hosts.allow to say:

	rpc.mountd: 192.168.4.: ALLOW

(replace IP address as appropriate :)

One note about hosts.allow - I'm still amazed at the number of people who use 
hosts.allow *and* hosts.deny. Most distro's these days have got the tcp 
wrappers with hosts_options which allows you to do away with hosts.deny by 
adding a whole host of keywords and enhancements (so you can say ALLOW and 
DENY), add ident lookups, display connection banners, spawn trap doors, 
renice things &c... Managing one hosts access file is a lot easier than 
manging two :) See man page for hosts_options(5) :)

Chris...
 

-- 
@}-,'--------------------------------------------------  Chris Johnson --'-{ [at] 
    / "(it is) crucial that we learn the difference / sixie [at] nccnet.co.uk  \
   / between Sex and Gender. Therein lies the key  /                       \ 
  / to our freedom" -- LB                         / www.nccnet.co.uk/~sixie \ 


---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.