Need a urgent help for restricting the RPC to access through firewall.

[M.R.Anand]

Hello,

We have an application running on HP UX 11.0 that provides certain services to the client running on sun solaris. The program creates an RPC service using function svc_create(). It
creates a socket and binds it to an arbitrary port and then creates server transport handles for all available transports(TCP/UDP). The PortMapper utility allows rpc callers and rpc services to find each other. The client application calls the pmap (port mapping
utility)service remotely to do the lookup. PortMapper returns the port number where the prog is registered.

We are attempting to restrict the port nos used for RPC service port allocation so that it can be accessed through a firewall.

Any Help??? Please advise.

[Michael Tully · Accepted solution]

There are number open to review.

First check /etc/inted.conf
After making changes run 'inetd -c'

Then view all of the start-up scripts in /sbin/init.d that 'rpc' services.

# cd /sbin/init.d
# grep -i rpc *

One other thing, you can restrict all ports through your firewall and only open those requiring services to be open, regardless of the services being started on your unix server.

[Michael Tully]

Here is one document that many people find useful in building a secre server.

http://people.hp.se/stevesk/bastion11.html

Also there is some recently released software called 'bastille'. You download a free copy from here. It will assist in identifying security holes in your system.

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA

[M.R.Anand]

Thanks Tully for your response and advise. Tully im the application support and at this moment i dont have access to the directory you mentioned. Can you kindly advise me in detail of what are the actions to be done, so that i can follow up with our network support to do the same?? ..

Many thanks for your help.

Anand.