Hi,

For reason of access security, to authorize only one machine customer chosen to reach services NFS by using the files hosts.deny and hosts.allow.

I do not find which line to be added in the file hosts.deny and/or hosts.allow?

Thinks.

To deny everything, add these lines to /etc/hosts.deny

This blocks all access, including services like ssh. Now to allow what you want through, edit /etc/hosts.allow, and add the things you want through. It will look like this:

The allow file is a comma separated list of IP's to allow. I believe the allow file rules are applied first, first match stops processing, and then the deny rules are applied if there are no matches. See the man page for hosts.allow. There are several different ways of specifying IP addresses. I just use a simple list for a small network. I had to add ssh to this file, without it ssh was blocked. Ssh is not required for NFS.

$ rpcinfo -p

The result of this command is :

Is it correct to make this :

/etc/hosts.deny:


/etc/hosts.allow:

As far as I know that is O.K. You may want to do some more testing, and checking. Here is the best reference I have come across.

-->http://www.linuxselfhelp.com/HOWTO/N.../security.html

The /etc/hosts.allow file is read first, then /etc/hosts.deny.
Generally, you just want ALL:ALL in hosts.deny for the above.
http://linux.die.net/man/5/hosts.allow

1 members found this post helpful.

Chris, thank-you for the correction. I updated my comment on allow deny.

Please, what is the new correction to put in 'hosts.deny' and 'hosts.allow'?

Is my answer above true ?

Thanks.

As Chris said, hosts.allow file is read first, so you should be fine with putting ALL:ALL in hosts.deny and then put the services and hosts that you want to allow in hosts.allow.

/etc/hosts.deny:

/etc/hosts.allow:


It is that ?

Yes. That looks absolutely fine to me.