The entire mention of portmap's TCPWRAPPERS in the man page of portmap says: This portmap version is protected by the tcp_wrapper library. You have to give the clients access to portmap if they should be allowed to use it. To allow connects from clients of the .bar.com domain you could use the following line in /etc/hosts.allow: portmap: .bar.com You have to use the daemon name portmap for the daemon name (even if the binary has a different name). For the client names you can only use the keyword ALL or IP addresses (NOT host or domain names). For further information please have a look at the tcpd((8)), hosts_al- low((5)) and hosts_access((5)) manual pages. Notice how .bar.com is not an IP address? This example needs to be fixed, as it misleads people into thinking that names are allowed. Please at least change the man page for RHL 7.0
Fixed in portmap-4.0-31. FTR, yes you can use host names and domain names.