Michael Scherer <msche...@redhat.com> wrote:

> I connected to it from rackspace and stopped rpcbind in a hurry after
> being paged, but I would like to make sure that the netbsd builders are
> a bit more hardened (even if they are already well hardened from what I
> did see, even if there is no firewall), as it seems most of them are
> also running rpcbind (and sockstat show they are not listening only on
> localhost).

I created minimal filtering rules in /etc/ipf.conf and restarted
rpcbind. I did the same for  others NetBSD vm.

> Emmanuel, would you be ok if we start to manage them with ansible like
> we do for the Centos ones ? 

I have no problem with it, but I must confess a complete lack of
experience with this tool.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
m...@netbsd.org
_______________________________________________
Gluster-infra mailing list
Gluster-infra@gluster.org
http://www.gluster.org/mailman/listinfo/gluster-infra

Reply via email to