Debian Bug Tracking System wrote:

On our NIS servers we only allow binding to eth0 interface, ypserv.conf:
 # Always allow access for localhost
 255.0.0.0       127.0.0.0
 255.255.252.0   192.168.16.0 (eth0)


That's not the documented format for ypserv.conf.  It should say
something more like (untested, so it may need some modification):

  127.0.0.0/8:*:*:none
  192.168.16.0/255.255.252.0:*:*:none
  *:*:*:deny

for what you seem to be looking for.  Please see the manual page for
ypserv.conf or look at the commented entries in the default ypserv.conf
for examples.


The example you sent me works ;-) The only change is this line:
127.0.0.0/8:*:*:none must be 127.0.0.1:*:*:none

Thanks a lot it is an bit confusing that there are two config files where we can specify access rules. In one config it works as desired an in the other not. Will the ypserv.securenets file be obsoleted in the future?



Thanks a lot for the info
--
--
********************************************************************
*                                                                  *
*  Bas van der Vlies                     e-mail: [EMAIL PROTECTED]      *
*  SARA - Academic Computing Services    phone:  +31 20 592 8012   *
*  Kruislaan 415                         fax:    +31 20 6683167    *
*  1098 SJ Amsterdam                                               *
*                                                                  *
********************************************************************


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to