> From postmaster Thu Feb 3 12:26:40 1994
> Date: Thu, 3 Feb 94 09:42:41 PST
> From: ark @
gov (Alene Kercheval)
> To: robert @
> Cc: Firewalls @
> Subject: Re: NFS mounts
> Sender: Firewalls-Owner @
> Content-Length: 192
> just put an access list in the /etc/exports file
> as so
> <exported filesystem> -access=<ok host>:<ok host>
> then only the hosts in the list will be allowed to mount the filesystem.
Even better use netgroups since the <ok host> list can get unwielding and
difficult to manage. Especially if you want to utilize the access feature
on "lots" of systems.
You'll also find other usefull features for netgroups...
foreach i (`ypcat -k netgroup | grep <some_netgroup>`)
filters for programs such as tcp_wrappers
Ron Gilmer International Software Systems Inc. (ISSI)
Voice: 512-338-5725 9430 Research Blvd
Fax: 512-338-5757 Echelon IV, Suite 250
email: rg @
com Austin, Texas 78759