From sparks@fedoraproject.org Wed Jun 10 15:41:18 2015 From: Eric Christensen To: docs-commits@lists.fedoraproject.org Subject: web/html/docs/security-guide/f10/en_US sect-Security_Guide-Securing_NFS-NFS_Firewall_Configuration.html, NONE, 1.1 Date: Wed, 11 Feb 2009 17:35:13 +0000 Message-ID: <20090211173513.A60A970094@cvs1.fedora.phx.redhat.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4964614069204185179==" --===============4964614069204185179== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Author: sparks Update of /cvs/fedora/web/html/docs/security-guide/f10/en_US In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv6464/en_US Added Files: sect-Security_Guide-Securing_NFS-NFS_Firewall_Configuration.html=20 Log Message: Updates from validation. --- NEW FILE sect-Security_Guide-Securing_NFS-NFS_Firewall_Configuration.html= --- 2.2.4.4.=C2=A0NFS F= irewall Configuration=

3D"Product3D"Documentation

  • P= rev
  • Next<= /strong>
  • 2.2.4.4.=C2=A0NFS Firewall Configuration

    The ports used for NFS are assigned dynamically by rpcbind, which can cau= se problems when creating firewall rules. To simplify this process, use the <= span class=3D"emphasis">/etc/sysconfig/nfs file to specify wh= ich ports are to be used:
    • MOUNTD_PORT =E2=80=94 TCP and UDP port f= or mountd (rpc.mountd)
    • STATD_PORT =E2=80=94 TCP and UDP port fo= r status (rpc.statd)
    • LOCKD_TCPPORT =E2=80=94 TCP port for nlo= ckmgr (rpc.lockd)
    • LOCKD_UDPPORT =E2=80=94 UDP port nlockmg= r (rpc.lockd)
    Port numbers specified must not be used by any other service. Configure y= our firewall to allow the port numbers specified, as well as TCP and UDP port= 2049 (NFS).
    Run the rpcinfo -p command on the NFS serv= er to see which ports and RPC programs are being used.
    --===============4964614069204185179==--