IRX Packet Filters.

Jason Hatch (zone@loomis.berkshire.net)
Tue, 18 Jun 1996 07:52:56 -0400 (EDT)

Is anyone here familiar with packet filters on an IRX router?

I'd like to disalow connections coming in for certain services, as a
security measure. These services are:

rpc.mountd (allows remote users to showmount you)
rpc.statd (perfmeter and the like use these, easier to filter than to wrap)
nfs (there is no way in tarnation I want anyone on the net mounting drives)
all xwindows services (NeWS), again, there is no need for anyone to
contact our Xservers.
any and all NIS (I dont' trust sun's yp hole, fixed or not)

some others.. I have looked at the manual, but as with everthing else,
livingston does a fine job of confusing me with ambiguous naming
conventions and vague documentation :)

I'm sure I can pull up the ports out of /etc/services, but can anyone
offer me a clue as to how to implement it, or point me to a faq?

-Jason