This is one remnant of the "trusted" world of Unix, and the legacy that Linux has to deal with. It's ipchains/iptables to the rescue.
I do not have NFS turned on in the kernel modules, nor the package installed. Yet this port is still open *to the outside world*. Can anyone suggest a reason why this has not been restricted only to the loopback interface, to be "opened" to other interfaces by the daemons if installed? That is, if it cannot be eliminated entirely. For the most part, I've found that Linux is good for not turning things on unless you want them on, but this seems to be the exception that proves the rule. Any other opinions? Curt- -----Original Message----- From: Thomas Bushnell, BSG [mailto:[EMAIL PROTECTED] Portmapper is an essential server for SunRPC services, including NFS, mountd, nfsd, etc.