topic Re: Close service portmap in Operating System - HP-UX

Close service portmap

Marcelo De Florio — Wed, 26 Jul 2000 19:34:05 GMT

I have close portmap service, this service work together with nfs ?

bye
MDF

Re: Close service portmap

Antoanetta Naghiu — Wed, 26 Jul 2000 20:00:35 GMT

Yes. NFS is using RPC. If you are using HP 11.0 do not need portmap, instead you'll need rpcbind.

Re: Close service portmap

Marcelo De Florio — Wed, 26 Jul 2000 20:17:41 GMT

Then I haven't problem to close this port ?

Re: Close service portmap

Alan Riggs — Wed, 26 Jul 2000 20:39:30 GMT

If portman was open and nfs was relying upon it, then you will have a problem.

Are you running 11.00? If so, you should have rpcbind running.

Run rpcinfo -p `hostname`. That should tell you what services are registered with rpc.

Re: Close service portmap

Antoanetta Naghiu — Wed, 26 Jul 2000 21:20:49 GMT

If you are using NFS, when you connect, the request goes on post 111 that is portmap. So, if your machine is NFS Server you need portmap service port 111 enable. From the client side, let me think: the socket is ip.unreserved_port... You still need to have rpcbind and biod running in the client...
But rpcbind is started before inetd...
In server side, you need for sure portmap service, in client side, I guess you could be ok... But, why you like to close portmap service?

Re: Close service portmap

Marcelo De Florio — Thu, 27 Jul 2000 12:14:40 GMT

I have a close the portmap for security issue. And then anything service of rpc used the portmap service ?

Re: Close service portmap

Antoanetta Naghiu — Thu, 27 Jul 2000 15:52:38 GMT

The NFS Server is using portmap service (port 111) for getting requests. So, if your machine exports NFS file systems, you need to let portmap sevice open. In both, HP-UX 10.20 or HP11.
If the machine is just a client, and portmap from /etc/services is comment out, NFS is ok.
So, you can work with NFS from client side having portmap service taken out.

Re: Close service portmap

Marcelo De Florio — Thu, 27 Jul 2000 17:09:07 GMT

Antoanetta, ok, but my question is another service used the portmap ?
for example: ito rpc.

Re: Close service portmap

Alan Riggs — Thu, 27 Jul 2000 18:01:41 GMT

Many other services use portmapper: nis, rpc, mountd, keyserv, etc.

To determine what services are registered with portmapper on the server in question do:

rpcinfo -p `hostname`

Re: Close service portmap

Antoanetta Naghiu — Thu, 27 Jul 2000 18:23:53 GMT

I had portmap service -port 111 from /etc/services file comment out and I still mount remote file systems. rpc.bind daemon (11) or portmapd (10.20) is started before inetd daemon. /etc/services is read and controll by inetd daemon.
So, I am not sure if other services access port 111, I think, no. Should not interact with anything else. Is just a port. Depends on that else you disable.
But, if you want secured environment there are other things that you need to do. I have a box that has none of the Berkely services, no telnet (I use ssh), and lots the others...

Re: Close service portmap

Marcelo De Florio — Thu, 27 Jul 2000 19:06:49 GMT

Alan, If I can close the portmap but and then any service (eg nis, rpc) worked properly.

Re: Close service portmap

Marcelo De Florio — Sat, 29 Jul 2000 03:42:38 GMT

Alan, If I can close the portmap but and then any service (eg nis, rpc) worked properly.

Re: Close service portmap

Alan Riggs — Mon, 31 Jul 2000 14:07:02 GMT

I think you are saying that you kileld the portmapper but your nis, nfs, etc. still ran. If so, please try the rpcinfo command again after portmapper has been killed (just to check to see whether it has restarted).

Assuming that portmapper is still down, I would say that the subsystems are managing to function only because their port number references are stored in some type of cached resource. As a rule, all PRC requests must go through portmapper to sync the DARPA port numbers with RPC program numbers. (subsystems register with portmapper, telling it what ports they listen to and what RPC requests they are prepared to serve.)