Restricting showmount

[SoorajCleris]

Hi Mates,

How can I restrict clients from seeing the exports from my NFS server?

server - HP-UX 11.31.

If I do showmount -e from ZZZ client, if the ZZZ client is not authorised to see that , it should not be able to see the exports.

How can I do this?

post your suggestions; points assured!!

Regards,
Sooraj

[Jibin Antony]

I was also looking for this.

I tried adding following entries in /var/adm/inetd.sec too. (11.31)

# cat /var/adm/inetd.sec
mountd deny
mountd allow w.x.y.z a.b.c.d


# inetd -c

Still all clients are able to see exports using "showmount -e nfsserver". Tried restarting nfs.core, nfs.server and nfs.client services, but no luck.

Thanks in advance.
Jibs

[SoorajCleris]

Hi Mates,

waiting for your suggetions !!!

:(

[SoorajCleris]

Hi Jibin,

Thanks for effors,

One of my mate suggested me to try with IPF with RPC.

inetd.sec is not working becuase mountd is not an inetd service.

regards,
Sooraj

[Jibin Antony]

If I understood the man page correctly, inetd.sec should be able to limit the NFS access to selected clients. Here is an excerpt from man page.

-----------
service name { allow | deny } { hostaddrs | hostnames | netaddrs | netnames }

Note: service name is the name (not alias) of a valid service in file /etc/services. The service name for RPC-based services (NFS) is the name (not alias) of a valid service in file /etc/rpc. A service name
in /etc/rpc corresponds to a unique RPC program number.

----------

Thanks,
Jibin Antony

[SoorajCleris]

Hi Mates,

Waiting for your suggestions!!!

:(

Regards,
Sooraj

[SoorajCleris]

Hi Mates,

Waiting for your suggestions!!!

Regards,
Sooraj

[SoorajCleris]

Hi,

I think it may be a difficult / time taking question.. I am closing this thread.

I got some hint , trying with IP Filter. Still I dont have the procedure. Once I found it , I would update the thread.

I am closing this thready as of now.

regards,
Sooraj

[SoorajCleris]

Will update