1securenets(4)                    File Formats                    securenets(4)
2
3
4

NAME

6       securenets - configuration file for NIS security
7

SYNOPSIS

9       /var/yp/securenets
10
11

DESCRIPTION

13       The   /var/yp/securenets  file  defines the networks or hosts which are
14       allowed access  to  information  by  the  Network  Information  Service
15       ("NIS").
16
17
18       The format of the file is as follows:
19
20           o      Lines beginning with the ``#'' character are treated as com‐
21                  ments.
22
23           o      Otherwise, each line contains two fields separated by  white
24                  space.  The first field is a netmask, the second a network.
25
26           o      The  netmask  field  may  be  either 255.255.255.255 (IPv4),
27                  ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff  (IPv6)  ,  or   the
28                  string  ``host''  indicating that the second field is a spe‐
29                  cific host to be allowed access.
30
31
32       Both ypserv(1M) and ypxfrd(1M) use the  /var/yp/securenets  file.   The
33       file  is  read  when  the   ypserv(1M) and ypxfrd(1M) daemons begin. If
34       /var/yp/securenets is present, ypserv(1M) and ypxfrd(1M)  respond  only
35       to  IP  addresses  in  the  range  given.  In order for a change in the
36       /var/yp/securenets file to take effect, you must kill and  restart  any
37       active daemons using ypstop(1M) and ypstart(1M).
38
39
40       An  important  thing  to  note  for  all the examples below is that the
41       server must be allowed to access itself. You accomplish this either  by
42       the server being part of a subnet that is allowed to access the server,
43       or by adding an individual entry, as the following:
44
45         hosts 127.0.0.1
46
47
48

EXAMPLES

50       Example 1 Access for Individual Entries
51
52
53       If individual machines are to be give access, the entry could be:
54
55
56         255.255.255.255     192.9.1.20
57
58
59
60
61       or
62
63
64         host 192.0.1.20
65
66
67
68       Example 2 Access for a Class C Network
69
70
71       If access is to be given to an entire class C network, the entry  could
72       be:
73
74
75         255.255.255.0  192.9.1.0
76
77
78
79       Example 3 Access for a Class B Network
80
81
82       The entry for access to a class B network could be:
83
84
85         255.255.0.0    9.9.0.0
86
87
88
89       Example 4 Access for an Invidual IPv6 Address
90
91
92       Similarly, to allow access for an individual IPv6 address:
93
94
95         ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff  fec0::111:abba:ace0:fba5e:1
96
97
98
99
100       or
101
102
103         host  fec0::111:abba:ace0:fba5e:1
104
105
106
107       Example 5 Access for all IPv6 Addresses Starting with fe80
108
109
110       To allow access for all IPv6 addresses starting with fe80:
111
112
113         ffff::  fe80::
114
115
116

FILES

118       /var/yp/securenets    Configuration file for NIS security.
119
120

SEE ALSO

122       ypserv(1M), ypstart(1M), ypstop(1M), ypxfrd(1M)
123

NOTES

125       The  Network Information Service (NIS) was formerly known as Sun Yellow
126       Pages (YP).  The functionality of the two remains the  same;  only  the
127       name  has  changed.  The name Yellow Pages is a registered trademark in
128       the United Kingdom of British Telecommunications plc, and  may  not  be
129       used without permission.
130
131
132
133SunOS 5.11                        26 Apr 1999                    securenets(4)
Impressum