[PLUG] Firewall NFS

plug_0 at robinson-west.com plug_0 at robinson-west.com
Fri Mar 3 19:17:46 UTC 2006


See: http://www.lowth.com/LinWiz/nfs_help.htm

I guessed on how to change nfslock, commented out the default line and
replaced it with: 

     daemon rpc.statd -p 4000

Fedora Core 3 is using some variable by default, but I don't know where
it comes from let alone how to set it.

So I'm think I've succeeded:

[root at goose ~]# rpcinfo -p localhost
   program vers proto   port
    100000    2   tcp    111  portmapper
    100000    2   udp    111  portmapper
    100024    1   udp   4000  status
    100024    1   tcp   4000  status
    100011    1   udp   4003  rquotad
    100011    2   udp   4003  rquotad
    100011    1   tcp   4003  rquotad
    100011    2   tcp   4003  rquotad
    100003    2   udp   2049  nfs
    100003    3   udp   2049  nfs
    100003    4   udp   2049  nfs
    100003    2   tcp   2049  nfs
    100003    3   tcp   2049  nfs
    100003    4   tcp   2049  nfs
    100021    1   udp   4001  nlockmgr
    100021    3   udp   4001  nlockmgr
    100021    4   udp   4001  nlockmgr
    100021    1   tcp   4001  nlockmgr
    100021    3   tcp   4001  nlockmgr
    100021    4   tcp   4001  nlockmgr
    100005    1   udp   4002  mountd
    100005    1   tcp   4002  mountd
    100005    2   udp   4002  mountd
    100005    2   tcp   4002  mountd
    100005    3   udp   4002  mountd
    100005    3   tcp   4002  mountd

The following is what has me concerned that I wasn't successfull:

[root at goose ~]# netstat -nlpu | grep rpc
udp        0      0 0.0.0.0:796                 0.0.0.0:*                      
        3164/rpc.statd
udp        0      0 0.0.0.0:4000                0.0.0.0:*                      
        3164/rpc.statd
udp        0      0 0.0.0.0:4002                0.0.0.0:*                      
        3511/rpc.mountd
udp        0      0 0.0.0.0:4003                0.0.0.0:*                      
        3494/rpc.rquotad

-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/



More information about the PLUG mailing list