On Tue, Aug 17, 1999 at 08:02:00PM +0200, Adam Morrison wrote:

> The real solution is system dependent.  Some versions of mountd allow
> you to set their port from the command line.  Some will notice an
> entry for `mountd' in  services(4) and use that.  Some will do both.
> And conversely, some clients allow you to specify a mount(1) option
> with the server's mountd port.  Unfortunately, this isn't a
> standardized area, so this really depends on how modern a system you're
> using.  If you can wire down the mountd port in this manner, you can
> safely filter it.  Otherwise, you need stateful filtering.

We're using OpenBSD, so it randomizes ports. Its mountd also doesn't
have an option for specifying the port number, and there's no entry
for mountd in /etc/services. I guess it boils down to modifying mountd
to use a fixed port here. Shouldn't be very hard I guess.

Thanks a lot for the detailed reply!


-- 
Alex Shnitman                            | http://www.debian.org
[EMAIL PROTECTED], [EMAIL PROTECTED]   +-----------------------  
http://alexsh.hectic.net    UIN 188956    PGP key on web page
       E1 F2 7B 6C A0 31 80 28  63 B8 02 BA 65 C7 8B BA

/real/ programmers 
    dd if=/dev/dsp of=a.out 
and whistle. 
        -- Gaal Yahas

PGP signature

Reply via email to