On Tue, Aug 22, 2000 at 06:15:35PM -0400, Brad Spencer wrote:
> 
> Depending on how far you are willing to go, something like this:
> 
> 
> portmap: ALL EXCEPT .my.domain.org, localhost
> 
> 
> in the /etc/hosts.deny file on the NFS server can do wonders in stopping
> RPC scanning.  If you attempt 'rpcinfo -p machine.with.above.org' you get
> fairly uninteresting results.

Sure, but this doesn't prevent contacting the RPC programs directly (a
scan can easily show on which port they runs).

--
Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@lip6.fr
--