[comp.protocols.nfs] restricting dir. export

aronb@gkcl.ists.ca (Aron Burns) (03/08/91)

We have put the line 

/usr/local/bin       -anon=65535

into the /etc/exports file of a Sun IPC running SunOS (most recent
version, it's a new install).  'man exports' tells me that this 
is the way to stop non-validated requests from mounting 
the file system in question.

Unfortunately, an MS-DOS machine running PC-NFS can still
read/write the mounted system without doing a 'net login', or
after attempting a login with an invalid userid/password 
combination.  The userid is nobody.

What are we doing wrong?  (Please don't RTFM me...the manuals
are in a different building and department and have to stay
there.  My only access to manuals is the occasional visit 
and running 'man' remotely.  I'm reading them as fast as possible.)



Aaron Burns      	     "Nothing I say on the net is binding
aronb@gkcl.ists.ca         to our corporation"
Toronto, Ontario         "Life is a forge, and the purest metal
(416)392-4310             comes from the hottest fire"