NFS Services Administrator's Guide

Configuring and Administering NFS
Configuring the Other NFS Daemons and Services
Chapter 2 135
Specify either allow or deny but not both. Enter only one line per
service.
host_or_network can be either an official host name or network name or
an IP address. Any of the four numbers in an IP address can be specified
as a range (for example, 1-28) or the wildcard character (*).
The inetd.sec file is checked only when the service is started. If a
service remains active and accepts more requests without being
restarted, the inetd.sec file is not checked again.
You can use SAM to modify the /var/adm/inetd.sec file.
For more information see the man pages inetd.conf(4) and
inetd.sec(4).
Examples from /var/adm/inetd.sec
The following example allows only hosts on subnets 15.13.2.0 through
15.13.12.0 to use the spray command:
sprayd allow 15.13.2-12.0
The following example prevents host cauliflower from using the rwall
command:
rwalld deny cauliflower