On Wed, Jul 4, 2012 at 4:04 AM, Joe <joe@jretrading.com> wrote: > > Most ports can be closed by configuration, even the infamous portmap > can be limited to localhost if you're not using it externally e.g. for > NIS or NFS. If you have a standalone Linux machine in a foreign > network, pretty much everything can be closed. With nfsv4, you don't have to expose 111; you can just have 2049 open (I've never tried to close 111 with nfsv3; perhaps it works too).