File Formats                                        securenets(4)



NAME
     securenets - configuration file for NIS security

SYNOPSIS
     /var/yp/securenets


DESCRIPTION
     The  /var/yp/securenets file defines the networks  or  hosts
     which  are  allowed  access  to  information  by the Network
     Information Service ("NIS").


     The format of the file is as follows:

         o    Lines  beginning  with  the  ``#''  character   are
              treated as comments.

         o    Otherwise, each line contains two fields  separated
              by  white space.  The first field is a netmask, the
              second a network.

         o    The netmask field  may  be  either  255.255.255.255
              (IPv4),     ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
              (IPv6) , or the string ``host'' indicating that the
              second  field  is  a  specific  host  to be allowed
              access.


     Both ypserv(1M) and ypxfrd(1M)  use  the  /var/yp/securenets
     file.   The file is read when the  ypserv(1M) and ypxfrd(1M)
     daemons begin. If /var/yp/securenets is present,  ypserv(1M)
     and  ypxfrd(1M)  respond  only  to IP addresses in the range
     given. In order for a change in the /var/yp/securenets  file
     to take effect, you must kill and restart any active daemons
     using ypstop(1M) and ypstart(1M).


     An important thing to note for all  the  examples  below  is
     that the server must be allowed to access itself. You accom-
     plish this either by the server being part of a subnet  that
     is  allowed to access the server, or by adding an individual
     entry, as the following:

       hosts 127.0.0.1



EXAMPLES
     Example 1 Access for Individual Entries





SunOS 5.11          Last change: 26 Apr 1999                    1






File Formats                                        securenets(4)



     If individual machines are to  be  give  access,  the  entry
     could be:


       255.255.255.255     192.9.1.20




     or


       host 192.0.1.20



     Example 2 Access for a Class C Network


     If access is to be given to an entire class C  network,  the
     entry could be:


       255.255.255.0  192.9.1.0



     Example 3 Access for a Class B Network


     The entry for access to a class B network could be:


       255.255.0.0    9.9.0.0



     Example 4 Access for an Invidual IPv6 Address


     Similarly, to allow access for an individual IPv6 address:


       ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff  fec0::111:abba:ace0:fba5e:1




     or


       host  fec0::111:abba:ace0:fba5e:1



SunOS 5.11          Last change: 26 Apr 1999                    2






File Formats                                        securenets(4)



     Example 5 Access for all IPv6 Addresses Starting with fe80


     To allow access for all IPv6 addresses starting with fe80:


       ffff::  fe80::



FILES
     /var/yp/securenets    Configuration file for NIS security.


SEE ALSO
     ypserv(1M), ypstart(1M), ypstop(1M), ypxfrd(1M)

NOTES
     The Network Information Service (NIS) was formerly known  as
     Sun Yellow Pages (YP).  The functionality of the two remains
     the same; only the name has changed. The name  Yellow  Pages
     is  a  registered trademark in the United Kingdom of British
     Telecommunications plc, and may not be used without  permis-
     sion.































SunOS 5.11          Last change: 26 Apr 1999                    3