access control for mountd, statd, and lockd?

[Steven Bellovin <smb%cs.columbia.edu@localhost>]

Is there any way to do strong access control on mountd, statd, and lockd?  For 
mountd, it appears that I can specify a specific port number, which I can then 
wall off with ipfilter.  I see no way to do anything similar for statd and 
lockd -- am I missing something?  

                --Steve Bellovin, http://www.cs.columbia.edu/~smb