[2086] in SIPB_Linux_Development
new mountd on sipb-nfs
daemon@ATHENA.MIT.EDU (mhpower@MIT.EDU)
Mon Aug 24 04:03:02 1998
From: mhpower@MIT.EDU
To: linux-dev@MIT.EDU, rtfm-maintainers@MIT.EDU
In-Reply-To: "[2065] in SIPB_Linux_Development",
"[7024] in RTFM_Maintainers_Archive"
Date: Mon, 24 Aug 1998 04:02:42 EDT
> ... We currently don't have any useful way
>to restrict the NFS export to hosts at MIT.
I modified the sipb-nfs mountd so that it can do access control by IP
address. Currently it allows access to most IP addresses (193/8, 202/8,
and 203/8 happen to be excluded) but this can be changed if needed.
The IP access control doesn't guarantee that NFS packets won't be sent
to unwanted addresses; it just refuses mount requests from some set of
source IP addresses for directory names starting with /redhat.
Matt
