Re: udp port sunrpc unreachable

["J. Bruce Fields" <bfields@fieldses.org>]

On Thu, Feb 02, 2006 at 10:25:04AM -0500, Trond Myklebust wrote:
> On Thu, 2006-02-02 at 10:19 -0500, J. Bruce Fields wrote:
> > On Thu, Feb 02, 2006 at 09:31:37AM -0500, Trond Myklebust wrote:
> > > Portmap appears only to be listening on the loopback adddress. Are you
> > > perhaps starting it before the external network comes up?
> > 
> > I think that's actually the debian default setting these days; with the
> > debconf verbosity at the default, it should have asked you about this
> > when portmap was installed.  Just edit /etc/default/portmap to comment
> > out the obvious line.
> 
> If true, then that would appear to be a rather ridiculous default. Have
> they put out a rationale for this?

Nope, I'm wrong, the default is the opposite.  So probably someone chose the
more secure-sounding option at install time and then forgot about it....

--b.

Template: portmap/loopback
Type: boolean
Default: false
_Description: Should portmap be bound to the loopback address?
 Portmap by default listens to all IP addresses. However, if you are
 not using RPC services that connect to remote servers (like NFS or NIS)
 you can safely bind it to the loopback IP address 127.0.0.1.
 .
 This will allow RPC local services (like FAM) to work properly while
 preventing remote systems from accessing your RPC services.
 .
 You can change this configuration also by editing the OPTIONS
 line in the /etc/default/portmap file. If you just don't specify
 the -i option it will bind to all interfaces.



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs