8.2. Securing the rpc.mountd service

Procedure

1. Add firewall rules to the server, for example:

   • Accept mountd connections from the 192.168.0.0/24 host:

     # firewall-cmd --add-rich-rule 'rule family="ipv4" service name="mountd" source address="192.168.0.0/24" invert="True" drop'

   • Accept mountd connections from the local host:

     # firewall-cmd --permanent --add-rich-rule 'rule family="ipv4" source address="127.0.0.1" service name="mountd" accept'

     To make the firewall settings permanent, use the --permanent option when adding firewall rules.

2. Reload the firewall to apply the new rules:

   # firewall-cmd --reload