HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   NFSv4 and hosts.deny, hosts.allow (http://www.howtoforge.com/forums/showthread.php?t=36973)

wizangzing 24th June 2009 17:34

NFSv4 and hosts.deny, hosts.allow
 
I'm setting up some NFSv4 shares and am not using kerberos. I know in the NFSv3 days it was recommended to set up /etc/hosts.allow and /etc/hosts.deny as follows.

I have 3 questions:

-1- is this still needed with nfs4?

-2- is this the right list of daemons for NFS v4?

-3- what else might be affected by these restrictions? Apache, mysql or samba, for example? I don't want to lock anything but NFS down without full knowledge of the consequences.

Thanks!


in /etc/hosts.deny disable services for all hosts:

portmap:ALL
lockd:ALL
mountd:ALL
rquotad:ALL
statd:ALL


in /etc/hosts.allow enable the services for trusted hosts:

portmap : 192.168.16.13 192.168.16.24
lockd : 192.168.16.13 192.168.16.24
mountd : 192.168.16.13 192.168.16.24
rquotad : 192.168.16.13 192.168.16.24
statd : 192.168.16.13 192.168.16.24


All times are GMT +2. The time now is 18:35.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.