Path: csiph.com!eternal-september.org!feeder.eternal-september.org!feeder.erje.net!1.eu.feeder.erje.net!fdn.fr!usenet-fr.net!nerim.net!saria.nerim.net!not-for-mail From: Pascal Hambourg Newsgroups: alt.os.linux.mageia,comp.os.linux.security Subject: Re: portmap/rpcbind and tcpwrapper Date: Sun, 11 Oct 2015 11:37:04 +0200 Organization: Plouf ! Lines: 10 Message-ID: References: <5619135e$0$23831$e4fe514c@news.xs4all.nl> Reply-To: pascal.news@plouf.fr.eu.org NNTP-Posting-Host: zenith.ipv6.plouf.fr.eu.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 8bit X-Trace: saria.nerim.net 1444556224 84166 2001:7a8:6d23:1::1 (11 Oct 2015 09:37:04 GMT) X-Complaints-To: abuse@nerim.net NNTP-Posting-Date: Sun, 11 Oct 2015 09:37:04 +0000 (UTC) User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) In-Reply-To: Xref: csiph.com alt.os.linux.mageia:10742 comp.os.linux.security:665 William Unruh a écrit : > On 2015-10-10, Pascal Hambourg wrote: >> >> You may consider to : >> - specify the address(es) rpcbind listens on with -h ; >> - filter undesirable RPC requests with iptables. > > rpcbind does not honour libwrap by default. My two suggestions have nothing to do with libwrap support.