Date: 18 Apr 2005 09:09:36 -0400 From: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org> To: "Florian Hengstberger" <e0025265@student.tuwien.ac.at> Cc: FreeBSD mailinglist <freebsd-questions@freebsd.org> Subject: Re: which interface: mountd,rpcbind Message-ID: <44ekd8z0xb.fsf@be-well.ilk.org> In-Reply-To: <if1ro5.icuujw@webmail.tuwien.ac.at> References: <if1ro5.icuujw@webmail.tuwien.ac.at>
next in thread | previous in thread | raw e-mail | index | archive | help
"Florian Hengstberger" <e0025265@student.tuwien.ac.at> writes: > Hi! > I really worry about that it seems (man mountd, man rpcbind) > impossible to specifiy the interface these daemons bind to. > > Specifing this in rc.conf > > rpcbind_enable="YES" > rpcbind_flags="-h 192.168.0.1" > nfs_server_enable="YES" > nfs_server_flags="-t -n 4 -h 192.168.0.1" > mountd_flags="-r" > > the output of sockstat -l is this: > root nfsd 398 3 tcp4 192.168.0.1:2049 *:* > root mountd 396 4 udp4 *:812 *:* > root mountd 396 5 tcp4 *:912 *:* > root mountd 396 6 udp6 *:811 *:* > root mountd 396 7 tcp6 *:911 *:* > root rpcbind 329 4 udp6 *:* *:* > root rpcbind 329 5 stream /var/run/rpcbind.sock > root rpcbind 329 6 udp6 ::1:111 *:* > root rpcbind 329 7 udp6 *:* *:* > root rpcbind 329 8 udp6 *:1023 *:* > root rpcbind 329 9 tcp6 *:111 *:* > root rpcbind 329 10 udp4 127.0.0.1:111 *:* > root rpcbind 329 11 udp4 192.168.0.1:111 *:* > root rpcbind 329 12 udp4 *:808 *:* > root rpcbind 329 13 tcp4 *:111 *:* > bind named 314 20 udp4 192.168.0.1:53 *:* > bind named 314 21 tcp4 192.168.0.1:53 *:* > bind named 314 22 udp4 127.0.0.1:53 *:* > bind named 314 23 tcp4 127.0.0.1:53 *:* > bind named 314 24 udp4 *:53 *:* > ... > > The man page of sockstat does not give information about * int > the last column, but I assume this means 'listens on all interfaces'. > How can I avoid this? You can't, as far as I can see. Looks like it would be an afternoon's work to add it in, but I wouldn't think it's worth worrying about it. Since you bind to an address already, a packet filter firewall will protect you from access on the wrong interface.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44ekd8z0xb.fsf>