[1471] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Replacement for NIS? (was Re: Obtaining NIS domainname from Gatorbox)

daemon@ATHENA.MIT.EDU (Scott Barman)
Fri Apr 14 13:06:03 1995

Date: Thu, 13 Apr 95 15:36:29 EDT
From: scott@Disclosure.COM (Scott Barman)
To: bugtraq@fc.net, scott@Disclosure.COM

I wrote:

>What's wrong with knowing one's NIS domainname?

Two things:

1) I realized why after I sent this.
2) I've already been told why by about a dozen people!  :-)
   THANKS everyone!

>I keep hearing people say this about NIS.  However, when one is
>running a lot of systems (including PC-NFS clients) it is fantastically
>easy to administrate (especially when one is not a full-time sysadmin).

How about this for a solution:

Have a firewall block the ports NIS is using and make sure the router
is programmed not to allow NIS packets through an outside line.  Would
this work or am I still asking for trouble?

Then the questions come, what ports do I block?  On one setup, I already 
block the ports for sunrpc.  Is that enough?

scott barman
scott@disclosure.com / barman@ix.netcom.com

home help back first fref pref prev next nref lref last post