I have an Ubuntu 9.10 server with a public and private interface. I'd like to run portmap only on the private interface for security, so in
/etc/default/portmap I had set:
But this made nfs-kernel-server fail to start, since it's trying to talk to portmap on 127.0.0.1, which, though local, is not 192.168.122.1! (The obvious solution of adding
-i 127.0.0.1 doesn't work; it only takes the last
-i option.) So instead I took out that line and instead set
portmap mountd nfsd statd lockd rquotad : 192.168.122.0/255.255.255.0
portmap mountd nfsd statd lockd rquotad : ALL
as documented in https://help.ubuntu.com/community/SettingUpNFSHowTo -- and restarted portmap. But I can still nc into the server on port 111 from a remote machine. It doesn't seem to let me do anything useful, but could I convince it to not even listen on the public interface to begin with?