John Burke writes:
> NSCONTROL STOP=HCS,PTOPL,PTOP,RFAL,RFA,NFTL,RPML,VTRL,VTR,VTL is sufficient
> to achieve the level of isolation I desire, but also disables both Apache
> and Samba. So a more narrowly defined version of my question is: which of
> these services is required by each of Apache/iX and Samba/iX?

Disables Apache/iX how, exactly?  What error messages (if any) do you see in the
Apache access log and error log?

Since Apache comes from the POSIX/Unix world, it shouldn't even be aware of any
of those services that you've stopped.

The only outbound service that Apache might want to use is DNS to do inverse
lookups on the client's IP address, and that's just basic TCP/IP, not a
special NS service.
--
Mark Bixby                      E-mail: [log in to unmask]
Coast Community College Dist.   Web: http://www.cccd.edu/~markb/
District Information Services   1370 Adams Ave, Costa Mesa, CA, USA 92626-5429
Technical Support               Voice: +1 714 438-4647
"You can tune a file system, but you can't tune a fish." - tunefs(1M)