Re: RH Taroon Beta Open Ports

[rhldevel assursys co uk]

On Mon, 25 Aug 2003, Paul Jakma wrote:

> On Mon, 25 Aug 2003, Felipe Alfaro Solana wrote:
> 
> > rpc.statd and portmap aren't the exclusive domain of NIS. Both are
> > enabled by default and used by NFS as client or server. I think they
> > could be disabled by default instead of being enabled by default.
> 
> sgi_fam is an RPC service and needs portmap and is used, i think, by 
> some of the GUI stuff (eg nautilus). portmap needs to be locally 
> accessible.
> 
> i do think portmap and rpc.statd should be firewalled off by default 
> though.

I'm pretty sure they are. What I object to is having them listen on
*non-loopback* interfaces needlessly.

> redhat-config-nfs or similar could enable portmap access if 
> nfs mounts are configured.

Quite.

Best Regards,
Alex.