type setup and select only the services you need.  If it's a server on the
internet and you don;t need NFS, then that should be disabled.  I got
hacked like that once.  I found a file called Spakit.c in a directory...



On Thu, 18 Jan 2001, Martin Brown wrote:

> On Thu, 18 Jan 2001, Rick Warner wrote:
> 
> > 
> > One person's opinion:  rpc.statd is only needed if running an NFS
> > server.  No NFS server should be 'exposed' to the Internet.  NFS and
> > components have been a security nightmare for over a decade now.   If you
> > need to run NFS for an internal net, make sure you have a good firewall
> > between you and the net to block all external access to NFS and
> > components.  Then do all the security updates as the second line of
> > defense.
> > 
> > - rick warner
> 
> I looked at my 6.2 box, and it is running 'rpc.statd', but I couldn't
> determine how it was started, and hence, the proper way to stop it, now
> and permanently.
> 
> Can someone clue in?
> 
> Thank you.
> 
>                             - Martin J. Brown, Jr. -                           
>                             - [EMAIL PROTECTED] -                           
>                                                                                
>     PGP Public Key ID: 0xCED9BD8A  Key Server: http://www.keyserver.net/en/
> 
> 
> 
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
> 



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to