Re: NFS exporting

[mre () primus com (Mike Evans)]

On Wed, 13 Apr 1994, Perry E. Metzger wrote:

> As for NFS in general, its useless. As soon as you export an NFS
> partition to the net (at least if you export it writable), you can
> kiss your machine goodbye. Among other nasty tricks, even without the
> mountd giving you any informaiton on the host you can just flood the
> machine with unlink requests or guess inode generation numbers or
> other such things. NFS is a hunk of junk.

You can block NFS (2049) at the router.  But that doesn't stop
internal ways of getting root on machines running NFS / breaking into
machines from the internal network.

Mike