{"id":151323,"date":"2020-09-01T03:33:18","date_gmt":"2020-08-31T19:33:18","guid":{"rendered":"http:\/\/4563.org\/?p=151323"},"modified":"2020-09-01T03:33:18","modified_gmt":"2020-08-31T19:33:18","slug":"%e6%b1%82%e5%b8%ae%e5%bf%99%e6%9f%a5%e7%9c%8b%e7%ba%a2%e5%b8%bd%e7%9a%84%e8%a7%a3%e5%86%b3%e6%96%b9%e6%a1%88%e5%b8%ae%e5%8a%a9%e6%96%87%e6%a1%a3","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=151323","title":{"rendered":"\u6c42\u5e2e\u5fd9\u67e5\u770b\u7ea2\u5e3d\u7684\u89e3\u51b3\u65b9\u6848\u5e2e\u52a9\u6587\u6863"},"content":{"rendered":"<div>\n<div>\n<div>\n<h1>                  \u6c42\u5e2e\u5fd9\u67e5\u770b\u7ea2\u5e3d\u7684\u89e3\u51b3\u65b9\u6848\u5e2e\u52a9\u6587\u6863               <\/h1>\n<p> <\/p>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : yuyujulin <\/span>  <span><i><\/i> 22<\/span> <\/div>\n<div> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div isfirst=\"1\">                        \u4e2a\u4eba\u6ce8\u518c\u7528\u6237\u6ca1\u6709\u8ba2\u9605\u7ea2\u5e3d\u7684\u670d\u52a1\uff0c\u6c42\u5404\u4f4d\u597d\u5fc3\u5e2e\u5fd9\u67e5\u770b\u4e00\u4e0b\u5982\u4e0b\u7ea2\u5e3d\u7684\u89e3\u51b3\u65b9\u6848\u6587\u6863\uff0c\u4e07\u5206\u611f\u8c22<\/p>\n<p>https:\/\/access.redhat.com\/solutions\/106563      <\/p><\/div>\n<div> <b>\u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (<span>6<\/span>)        <\/div>\n<div> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<ul>\n<li data-pid=\"3019602\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : LokiSharp <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             \u6ce8\u518c\u4e2a\u5f00\u53d1\u8005\u8d26\u6237\u5c31\u80fd\u968f\u4fbf\u770b\u4e86                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"3019603\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : yuyujulin <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @LokiSharp \u6ce8\u518c\u4e86\u4e00\u4e2a\u8d26\u53f7\uff0c\u5355\u4f30\u8ba1\u4e0d\u662f\u5f00\u53d1\u8005\u8d26\u53f7\uff0c\u6211\u67e5\u67e5\u80fd\u4e0d\u80fd\u6ce8\u518c\u5f00\u53d1\u8005\u8d26\u53f7\uff0c\u73b0\u5728\u80fd\u5e2e\u5fd9\u67e5\u4e00\u4e0b\u5417\uff1f\u5148\u8c22\u8c22\u4e86                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"3019604\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : echo1937 <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             Resolution<br \/>portmapper on RHEL-5 could be secured by having it listen on localhost only. rpcbind does not offer this option. tcpwrappers and firewall can be used for securing both portmapper and rpcbind.<br \/>To secure rpcbind with tcpwrappers use something like:<br \/>Raw<br \/># cat \/etc\/hosts.allow <br \/>rpcbind: 127.0.0.1<\/p>\n<p># cat \/etc\/hosts.deny <br \/>rpcbind: ALL<br \/>Root Cause<br \/>The -h option for rpcbind is not expected to force rpcbind to listen on localhost only. The description from the manual page (man 8 rpcbind):<\/p>\n<p>Raw<br \/> -h Specify specific IP addresses to bind to for UDP requests. This<br \/> option may be specified multiple times and is typically necessary<br \/> when running on a multi-homed host. If no -h option is speci-<br \/> fied, rpcbind will bind to INADDR_ANY, which could lead to prob-<br \/> lems on a multi-homed host due to rpcbind returning a UDP packet<br \/> from a different IP address than it was sent to. Note that when<br \/> specifying IP addresses with -h, rpcbind will automatically add<br \/> 127.0.0.1 and if IPv6 is enabled, ::1 to the list.                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"3019605\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : LokiSharp <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @yuyujulin #2 https:\/\/developers.redhat.com\/ \u4e0b\u9762\u6709\u4e2a\u7ea2\u8272\u7684 Join Red Hat Developer\uff0c\u6ce8\u518c\u4e00\u4e0b\u5c31\u80fd\u62ff\u5230 Red Hat Developer Subscription                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"3019606\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : yuyujulin <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @echo1937 \u4e07\u5206\u611f\u8c22                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"3019607\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : yuyujulin <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             @LokiSharp \u611f\u8c22\uff0c\u611f\u8c22                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li>\n","protected":false},"excerpt":{"rendered":"<p>\u6c42\u5e2e\u5fd9\u67e5\u770b\u7ea2\u5e3d\u7684\u89e3\u51b3\u65b9\u6848\u5e2e\u52a9\u6587\u6863 &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/151323"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=151323"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/151323\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=151323"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=151323"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=151323"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}