[lug] Re: Unauthorized Portmap Connection

[D. Stimits]

Scott Herod wrote:
> 
> Also, download the latest version of the nfs utilities from RedHat
> to hopefully avoid a buffer overflow attack in the one shipped with
> 6.2.
> 
> >
> > I'm with Sean.  Use ipchains.  And while you're at it, get an
> > old 486 to act as your firewall so you don't have to run nfs
> > on a machine that's directly connected to the Internet.
> >
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug

There are also options to disallow root access to NFS mounted
partitions. If you must use NFS, disallow root.