> ALL EXCEPT sshd, sftpd, nfsd, rpcd: All

I don't know if it does matter, but I would try to write the ALL wildcard in
upper case.

Georg

> -----Original Message-----
> From: Linux on 390 Port [mailto:[EMAIL PROTECTED]]On Behalf Of
> Scott Koos
> Sent: Friday, June 21, 2002 7:56 PM
> To: [EMAIL PROTECTED]
> Subject: hosts.allow / deny question
>
>
> Hi,
>
>    I was trying to use the hosts.allow /.deny to limit who can access our
> S390 SLES-7 guests.  The man page says first that .allow is searched, then
> .deny and then falls through and is allowed by default.  I'm
> trying to do a
> NFS mount and getting this:
>
> Welcome to SuSE SLES-7 (s390) - Kernel 2.4.7-timer-SMP (0).
>
> lnxbase login: root
> Password:
> YPBINDPROC_DOMAIN: Domain not bound
> You have new mail in /var/mail/root.
> Last login: Thu Jun 20 10:32:25 from 172.27.80.24
> Have a lot of fun...
> lnxbase:~ # mount -t nfs -o rw,rsize=8192,wsize=8192,timeo=14
> lnxsuse1:home
> /home
> mount: RPC: Unable to receive; errno = Connection refused
> lnxbase:~ #
>
>
> On lnxsuse1 my hosts.allow looks like this:
>
>
> lnxsuse1:~ # less /etc/hosts.allow
>
> # See tcpd(8) and hosts_access(5) for a description.
>
> #ALL EXCEPT in.fingerd, in.identd : ALL : spawn (safe_finger -l
> @%h 2>&1| \
> #               /bin/mail -s "%d-%h %u" root) &
>
> http-rman: localhost
> #
> # Allow only specific hosts, deny ALL others ...
> #
> ALL: lnxbase.transtar.local
> ALL: lnxbase.tstarinc.com
> ALL: lnxtwas0.transtar.local
> ALL: lnxtwas0.tstarinc.com
> ALL: lnxqwas0.transtar.local
> ALL: lnxqwas0.tstarinc.com
> ALL: linuxp1.transtar.local
> ALL: linuxp1.tstarinc.com
> ALL: skoos1.transtar.local
> ALL: skoos1.tstarinc.com
> ALL: jtoman1.transtar.local
> ALL: jtoman1.tstarinc.com
> ALL: tpajak1.transtar.local
> ALL: tpajak1.tstarinc.com
>
>
>
> The hosts.deny looks like this:
>
> lnxsuse1:~ # less /etc/hosts.deny
>
> # See tcpd(8) and hosts_access(5) for a description.
>
> http-rman : ALL EXCEPT LOCAL
> #
> # deny ALL except what is in /etc/hosts.allow
> #
> ALL EXCEPT sshd, sftpd, nfsd, rpcd: All
>
>
> The /etc/exports looks like this:
>
> lnxsuse1:~ # less /etc/exports
>
> # See exports(5) for a description.
> # This file contains a list of all directories exported to other
> computers.
> # It is used by rpc.nfsd and rpc.mountd.
> /install *.transtar.local(ro,no_root_squash)
> /install *.tstarinc.com(ro,no_root_squash)
> /home    *.transtar.local(rw,no_root_squash)
>
>
>    If I rename /etc/hosts.deny then the NFS mount works fine.  Any ideas
> would be greatly appreciated.
>
> Thanks in advance,
> Scott

Reply via email to