topic Securing RPC-based services - Inetd.sec vs IPFilter in Operating System - HP-UX

Securing RPC-based services - Inetd.sec vs IPFilter

Robert C. Hursch — Thu, 06 May 2004 09:00:37 GMT

Is there a way to use IPFilter (A.03.05.09) to restrict (by IP address) the use of individual RPC-based services in /etc/rpc or do I need to use the inetd.sec file?

Re: Securing RPC-based services - Inetd.sec vs IPFilter

harry d brown jr — Thu, 06 May 2004 09:31:31 GMT

You can allow/deny access to ports related to an IP via ipfilter.

http://www.obfuscation.org/ipf/ipf-howto.txt

live free or die
harry

Re: Securing RPC-based services - Inetd.sec vs IPFilter

Robert C. Hursch — Thu, 06 May 2004 10:00:43 GMT

I have seen this document that you refer to and it does describe securing ports, but I could not find details about coding the /etc/rpc "program numbers" into my ipf.conf file. Could I code the number 100017 from /etc/rpc to restrict access for the rexd usage? Thanks