Is there a "standard" or "recommended" way of securing the various client daemons (statd and lockd for NFSv3, add mapid and cbd for NFSv4)? Even with rpcbind set to local_only the ports are still accessible and thus exploitable. Is a IPFilter the only real solution?
benr. This message posted from opensolaris.org