求帮忙查看红帽的解决方案帮助文档
- 0次
- 2021-06-16 12:38:49
- idczone
个人注册用户没有订阅红帽的服务,求各位好心帮忙查看一下如下红帽的解决方案文档,万分感谢
https://access.redhat.com/solutions/106563
注册个开发者账户就能随便看了
注册了一个账号,单估计不是开发者账号,我查查能不能注册开发者账号,现在能帮忙查一下吗?先谢谢了
Resolution
portmapper on RHEL-5 could be secured by having it listen on localhost only. rpcbind does not offer this option. tcpwrappers and firewall can be used for securing both portmapper and rpcbind.
To secure rpcbind with tcpwrappers use something like:
Raw
cat /etc/hosts.allow
rpcbind: 127.0.0.1
cat /etc/hosts.deny
rpcbind: ALL
Root Cause
The -h option for rpcbind is not expected to force rpcbind to listen on localhost only. The description from the manual page (man 8 rpcbind):
Raw
-h Specify specific IP addresses to bind to for UDP requests. This
option may be specified multiple times and is typically necessary
when running on a multi-homed host. If no -h option is speci-
fied, rpcbind will bind to INADDR_ANY, which could lead to prob-
lems on a multi-homed host due to rpcbind returning a UDP packet
from a different IP address than it was sent to. Note that when
specifying IP addresses with -h, rpcbind will automatically add
127.0.0.1 and if IPv6 is enabled, ::1 to the list.
https://developers.redhat.com/ 下面有个红色的 Join Red Hat Developer,注册一下就能拿到 Red Hat Developer Subscription
万分感谢
感谢,感谢