search for: portmap

Hi all, I want to map an NFS share from a remote server to a local CentOS 5.4 server, but have a problem with portmap: root at mercury:[~]$ service portmap restart pmap_getmaps rpc problem: RPC: Unable to receive; errno = Connection reset by peer Stopping portmap: [FAILED] Starting portmap: [ OK ] root at mercury:[~]$ service port...

I don't know if this is RedHat 5.1 specific, but be aware that the version of portmap distributed is the enhanced (Wietse Venema) version. That's great, except for two things. The first is documented, but easy to overlook: "In order to avoid deadlocks, the portmap program does not attempt to look up the remote host name or user name...The upshot of all this is that only...

Are there any known vulnerabilities in portmap (redhat''s portmap-4.0-7b)? I''ve been receiving a lot of attempts to access the portmap port on some linuxppc machines I administer by various machines which clearly have no business with mine, and I wonder if this is an attempt to break in to my machines. I''ve searched...

CentOS 5 updated, Xen host. The portmap on this machine is somehow "stuck" and I can't figure out why. I enabled it to be able to mount a remote nfs share. The first hurdle was that "portmap" didn't appear in the chkconfig list, it was installed with the initial packages but not added to chkconfig. Took me...

Anybody else noticed this: debug: package provider yum: Executing ''/usr/bin/yum -d 0 -e 0 list available portmap'' err: //nfs_server/Package[portmap]: Failed to retrieve current state of resource: Could not get latest version: Execution of ''/usr/bin/ yum -d 0 -e 0 list availaSearching 100% | =========================| 16 kB 00:03 Error: No matching Packages to list...

I am running Redhat 6.1 as a firewall between a cable modem and my home network. Occasionally, I see messages such as these under /var/log/messages: Jan 17 13:38:16 saturn5 portmap[3726]: connect from 24.28.77.200 to dump(): request from unauthorized host Jan 18 14:00:34 saturn5 portmap[1544]: connect from 204.151.148.146 to dump(): request from unauthorized host My assumption is that the service is fulfilling its purpose of rejecting unauthorized traffic. However, I'm...

Hi all I have a CentOS 5.1 server running Xen and recently installed ConfigServer Firewall (CSF) on the main node to give it some protection. On a daily basis I''m getting an email about portmap. haldeamon and xfs consumming too much resources. The main node, dom0 doesn''t even do anything, and everything is done on the domU''s Here''s a thread I''ve posted on the ConfigServer Forums: http://forum.configserver.com/showthread.php?t=1225 So, do I really n...

Greetings I'm running an NIS server that I would very much *not* want to be accessible on some of its interfaces. portmap can be instructed to bind to specific addresses using the -h flag, but this seems to break ypbind. ypbind will attempt to find a server by issuing a broadcast rpc request to the local network. When portmap is not bound to INADDR_ANY, it will not reply to these requests. I'd rather not have t...

...tclass=file audit(1156518721.280:5): avc: denied { append } for pid=2224 comm=" syslogd" name="messages" dev=dm-3 ino=38 scontext=user_u:system_r:syslogd_t tcontext=system_u:object_r:file_t tclass=file audit(1156518721.757:7): avc: denied { read } for pid=2246 comm="portmap" name="libnsl-2.3.4.so" dev=dm-0 ino=48836 scontext=user_u:system_r:portmap_t tcontext=system_u:object_r:file_t tclass=file audit(1156518728.009:10): avc: denied { read } for pid=2411 comm="named" name="liblwres.so.1.1.2" dev=dm-0 ino=462795 scontext=user_u:sy...

Hi all, I have implemented portmap spoofing in klibc nfsmount (released as klibc-0.144) This is basically a vestigial portmap daemon which gets launched before the mount() call and then just records any transactions it gets to a file and sends back an affirmative reply. There are two ways to use it (this belongs in a README fil...

Having problems starting httpd & portmapper #service httpd start /usr/sbin/httpd: error while loading shared libraries: libm.so.6: cannot open shared object file: No such file or directory and I traced it to selinux, which I had just turned on for the first time: # sestatus SELinux status: enabled SELinuxfs mount:...

An HTML attachment was scrubbed... URL: <http://supercolony.gluster.org/pipermail/gluster-users/attachments/20120304/04099724/attachment.html>

...images directory the approriate - bin dev etc lib mnt proc root sbin tmp usr var - directories in root PXE Client - is able to get dhcp address, see the pxelinux.cfg ... etc.... seems to proceed but stumbles thereafter with the following error: "Looking up port of RPC 10003/2 on 192.168.1.5 Portmap RPC call returned error 101 Root-NFS Unable to get nfsd port # from server, using default ...." ............. Any thoughts, pointers, advise and suggestions would be greatly appreciated. best, -- A S P A S I A . . . . . . . . . . ..

Hi all, I have setup a CentOS6.3 x86_64 host to act as a nfs server. According to RHEL6 docs, portmap is not needed when you use NFSv4, but in my host I need to start rpcbind service to make NFSv4 works. My /etc/sysconfig/nfs # # Define which protocol versions mountd # will advertise. The values are "no" or "yes" # with yes being the default MOUNTD_NFS_V2="no" MOUNT...

...0 0 localhost:filenet-rpc localhost:filenet-rpc > ESTABLISHED 1980/postmaster > > > > > > It looks like you need to deconfigure portsentry from listening on that > port and then you should be good to go. IOW, portsentry is ok to run, but > not on your portmapper port when you need to run portmapper. > > > > -geoff > > > > --------------------------------- > Geoff Galitz > Blankenheim NRW, Germany > http://www.galitz.org/ > http://german-way.com/blog/ > > _______________________________________________ > awe...

Hello all, I have a server on my private network that is configured as an NIS server and mapped to a "public" IP address on a firewall. All other TCP ports (SSH, iperf, you name it) are visible from the outside - but the portmapper-managed ports (port 111 itself and the YPSERV/YPXFRD ports, etc.) are not visible from the outside - even though they are alive and well on the internal network. So, here's the question: is there anything special as far as portmapper's networking/security setup that is at play here? Th...

...t; 135 0.00003 sambaserver -> winclient TCP D=4551 S=111 Syn Ack=418004171 Seq=2995536248 Len=0 Win=24820 Options=<nop,nop,sackOK,mss 1460> 136 0.00032 winclient -> sambaserver TCP D=111 S=4551 Ack=2995536249 Seq=418004171 Len=0 Win=64240 137 0.00055 winclient -> sambaserver PORTMAP C DUMP 138 0.00006 sambaserver -> winclient TCP D=4551 S=111 Ack=418004251 Seq=2995536249 Len=0 Win=24740 139 0.00096 sambaserver -> winclient PORTMAP R DUMP 60 map(s) found 140 0.00075 winclient -> sambaserver TCP D=111 S=4551 Fin Ack=2995537481 Seq=418004251 Len=0 Win=63008 141...

...by alexandria.cs.uchicago.edu (8.9.1/8.9.1) with ESMTP id RAA15550; Sat, 5 Dec 1998 17:50:39 -0600 (CST) Received: (from osquigle@localhost) by yeenoghu.cs.uchicago.edu (8.9.1/8.8.5) id RAA13233; Sat, 5 Dec 1998 17:50:39 -0600 (CST) To: linux-security@redhat.com cc: BUGTRAQ@netspace.org Subject: portmap vulnerability? Mime-Version: 1.0 (generated by tm-edit 7.108) Content-Type: text/plain; charset=US-ASCII From: Sam Quigley <osquigle@cs.uchicago.edu> Date: 05 Dec 1998 17:50:38 -0600 Message-ID: <o9u7lw6ywq9.fsf@yeenoghu.cs.uchicago.edu> Lines: 19 X-Mailer: Gnus v5.6.9/XEmacs 20.4 - &qu...

...1s/0x0010/info) - Connector Int.Ports 4-7 (loc=2 sasMux=0x1) is active Sep 17 11:25:39 romulus kernel: mfi0: 200239 (boot + 31s/0x0002/info) - Inserted: PD 1e(e0xff/s30) Sep 17 11:25:39 romulus kernel: mfi0: 200240 (boot + 31s/0x0002/info) - Inserted: PD 1e(e0xff/s30) Info: enclPd=ffff, scsiType=0, portMap=04, sasAddr=2e327a7b9c92a5a2,0000000000000000 Sep 17 11:25:39 romulus kernel: mfi0: 200241 (boot + 31s/0x0002/info) - Inserted: PD 1f(e0xff/s31) Sep 17 11:25:39 romulus kernel: mfi0: 200242 (boot + 31s/0x0002/info) - Inserted: PD 1f(e0xff/s31) Info: enclPd=ffff, scsiType=0, portMap=05, sasAddr=2c41...

...s are that the new server is behind a firewall. The firewall is open for the machine on ports 22, 80, 8000, and 8001. I am setting up the icecast stream to run at port 8000. Looking at nmap the only difference that seems to possibly being affecting icecast is that I do not have port 111 open for portmapping, because portmapping can not work with our firewall rules, I can however open more ports in advance if I know where they will be getting mapped to. I can't seem to find any possible problems besides the port issues. thanks in advance, Tucker