search for: nfs_server_en

I have an NFS server and NFS client separated by a firewall. Both servers are FreeBSD 7.1. Server configuration: nfs_server_enable="YES" nfs_server_flags="-t -n 4" rpcbind_enable="YES" mountd_flags="-r -p 737" mountd_enable="YES" The firewall allows tcp and udp to port 111, but only tcp to ports 2049 and 737 (configured for mountd, see above). On the client I use e.g. the...

...nic. The kernel will only process the RPC messages if a userland nfsd daemon is running. III. Impact The NULL pointer deference allows a remote attacker capable of sending RPC messages to an affected FreeBSD system to crash the FreeBSD system. IV. Workaround 1) Disable the NFS server: set the nfs_server_enable variable to "NO" in /etc/rc.conf, and reboot. Alternatively, if there are no active NFS clients (as listed by the showmount(8) utility), simply killing the mountd and nfsd processes should suffice. 2) Add firewall rules to block RPC traffic to the NFS server from untr...

...="YES" lpd_enable="YES" moused_port="/dev/psm0" moused_type="auto" moused_enable="YES" ntpdate_flags="0.us.pool.ntp.org" ntpdate_enable="YES" ntpd_enable="YES" snmpd_enable="YES" rpcbind_enable="YES" nfs_server_enable="YES" nfs_server_flags="-u -t -n 4" mountd_flags="-r" amd_enable="YES" inetd_enable="YES" sshd_enable="YES" font8x16="iso15-8x16" #font 8x16 from /usr/share/syscons/fonts/* (or NO). font8x14="iso15-8x14" #font...

...nic. The kernel will only process the RPC messages if a userland nfsd daemon is running. III. Impact The NULL pointer deference allows a remote attacker capable of sending RPC messages to an affected FreeBSD system to crash the FreeBSD system. IV. Workaround 1) Disable the NFS server: set the nfs_server_enable variable to "NO" in /etc/rc.conf, and reboot. Alternatively, if there are no active NFS clients (as listed by the showmount(8) utility), simply killing the mountd and nfsd processes should suffice. 2) Add firewall rules to block RPC traffic to the NFS server from untr...

...nic. The kernel will only process the RPC messages if a userland nfsd daemon is running. III. Impact The NULL pointer deference allows a remote attacker capable of sending RPC messages to an affected FreeBSD system to crash the FreeBSD system. IV. Workaround 1) Disable the NFS server: set the nfs_server_enable variable to "NO" in /etc/rc.conf, and reboot. Alternatively, if there are no active NFS clients (as listed by the showmount(8) utility), simply killing the mountd and nfsd processes should suffice. 2) Add firewall rules to block RPC traffic to the NFS server from untr...