Subject: Re: Binding RPC services to specific ports
To: Luke Mewburn <lukem@NetBSD.org>
From: Jason Thorpe <thorpej@shagadelic.org>
List: tech-security
Date: 07/18/2005 08:48:33
On Jul 17, 2005, at 8:21 PM, Luke Mewburn wrote:

> The syntax of IRIX's /etc/rpcports is each line is
>     program  transport  port  access
> (or empty or a comment line starting with '#')

I think /etc/rpcports is great.  But I would ask that you please make  
it nsswitch'able.

>
> Each line:
>     program        RPC program number (see rpc(4)), or the
>             capitalized keyword ANY.
>         [NetBSD uses rpc(5)]
>
>     transport    Transport name, either udp or tcp.
>         [NetBSD also supports udp6/tcp6 ?]
>
>     port        Port, or port range expressed as a pair of
>             ports separated only by a ``-'' character,
>             without any space or tab characters.
>             A port is specified numerically.
>         [Couldn't we support port names here?]
>
>     access        Whether the port or port range is available,
>             either ``allow'' or ``deny''.
>
>
> Do people know of other prior art in this area?
>
> Comments about adding this style of functionality to NetBSD?
>
> Cheers,
> Luke.
>

-- thorpej