> From postmaster Thu Feb 3 12:26:40 1994
> Date: Thu, 3 Feb 94 09:42:41 PST
> From: ark @
lance .
tis .
llnl .
gov (Alene Kercheval)
> To: robert @
puente .
jpl .
nasa .
gov
> Cc: Firewalls @
greatcircle .
com
> Subject: Re: NFS mounts
> Sender: Firewalls-Owner @
greatcircle .
com
> Content-Length: 192
>
>
>
> just put an access list in the /etc/exports file
> as so
>
> <exported filesystem> -access=<ok host>:<ok host>
>
> then only the hosts in the list will be allowed to mount the filesystem.
>
> Alene
>
Even better use netgroups since the <ok host> list can get unwielding and
difficult to manage. Especially if you want to utilize the access feature
on "lots" of systems.
You'll also find other usefull features for netgroups...
foreach i (`ypcat -k netgroup | grep <some_netgroup>`)
or
filters for programs such as tcp_wrappers
or
....
-rg-
Ron Gilmer International Software Systems Inc. (ISSI)
Voice: 512-338-5725 9430 Research Blvd
Fax: 512-338-5757 Echelon IV, Suite 250
email: rg @
issi .
com Austin, Texas 78759
|
|
