summaryrefslogtreecommitdiffstats
path: root/etc/hosts.allow
diff options
context:
space:
mode:
authormarkm <markm@FreeBSD.org>2002-02-06 20:39:36 +0000
committermarkm <markm@FreeBSD.org>2002-02-06 20:39:36 +0000
commit5351d0d669aaf357b31d421e05f270a7651e1f8b (patch)
treeefc7e3687dff5257969f07b17832d8790937105a /etc/hosts.allow
parent021d8e63a1879a46bf287d200af7cde8f8463a73 (diff)
downloadFreeBSD-src-5351d0d669aaf357b31d421e05f270a7651e1f8b.zip
FreeBSD-src-5351d0d669aaf357b31d421e05f270a7651e1f8b.tar.gz
Enable TCP_WRAPPERs for the NIS server. The protection afforded is
not massive, but usable.
Diffstat (limited to 'etc/hosts.allow')
-rw-r--r--etc/hosts.allow6
1 files changed, 6 insertions, 0 deletions
diff --git a/etc/hosts.allow b/etc/hosts.allow
index f4e1353..e24f0c2 100644
--- a/etc/hosts.allow
+++ b/etc/hosts.allow
@@ -63,6 +63,12 @@ rpcbind : 192.0.2.32/255.255.255.224 : allow
rpcbind : 192.0.2.96/255.255.255.224 : allow
rpcbind : ALL : deny
+# NIS master server. Only local nets should have access
+ypserv : localhost : allow
+ypserv : .unsafe.my.net.example.com : deny
+ypserv : .my.net.example.com : allow
+ypserv : ALL : deny
+
# Provide a small amount of protection for ftpd
ftpd : localhost : allow
ftpd : .nice.guy.example.com : allow
OpenPOWER on IntegriCloud