Iptables for NFS Servers, random ports?


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users Iptables for NFS Servers, random ports?
# 1  
Old 03-13-2009
Iptables for NFS Servers, random ports?

This may seem like a silly question, but how do you iptable firewall an NFS Server tightly? I tend to use Samba much more heavily which is easy, the ports are clearly defined... but on NFS it is relying on portmapper (yuck).... so the ports may change... Is it possible to fix the NFS Server ports, and if so, do you still have to keep portmapper open? (I guess so) Or is there some clever iptables rule or module that will allow NFS to work without opening lots of high port numbers..? EDIT: OK solved it, fixing the ports is definitely the way to go...

Last edited by humbletech99; 03-13-2009 at 09:35 AM..
# 2  
Old 03-17-2009
It is possible. The key is to lock down the port numbers for mountd, lockd and statd.

Lots of information available on the Internet. Do a web search for "NFS iptables"
# 3  
Old 03-23-2009
yes I solved it and added an EDIT after posting to explain, but the formatting has come out wrong so you must have missed the edit at the bottom of the original post...
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Red Hat

RHEL 7.1 autofs permissions do not match NFS servers

RHEL 7.1 client using autofs to mount a NIS map of home directories being exported by a Solaris 10x86 nfs server. The owner and group are correct on the NFS server, but on the RHEL client, the owner and group end up being nobody nobody. The USERS and GROUPS are NIS maps as well. They are... (2 Replies)
Discussion started by: mrmurdock
2 Replies

2. Solaris

Change NFS default ports

Hello friends, please advice me how to change nfs lockd_tcpport,lockd_udpport,mountd_port,rquotad_port.statd_port,statd_outgoing_port default ports in to different ports. is it in /etc/default/nfs ? thanks!:b: (1 Reply)
Discussion started by: darakas
1 Replies

3. Red Hat

Problem about NFS to change the share folder at several servers.

All, I re-wrote our scripts to speed-up the compiling time, original time is about 1hrs. now dispatch the sub task to different servers through SSH. Now my question is that: If dispatch these tasks into the current server, there is no errors during compiling process. If dispatch these tasks... (0 Replies)
Discussion started by: fduan001
0 Replies

4. Shell Programming and Scripting

Need to generate a file with random data. /dev/[u]random doesn't exist.

Need to use dd to generate a large file from a sample file of random data. This is because I don't have /dev/urandom. I create a named pipe then: dd if=mynamed.fifo do=myfile.fifo bs=1024 count=1024 but when I cat a file to the fifo that's 1024 random bytes: cat randomfile.txt >... (7 Replies)
Discussion started by: Devyn
7 Replies

5. Shell Programming and Scripting

Script to check numerous ports / servers (Solaris native)

Hi I'd like to check that a bunch of firewall rules have been applied and, therefore, want to write a script that basically does the following: telnet serverA port1 telnet serverA port2 telnet serverB port1 telnet serverB port2 I would just compile the list in excel and run it as a... (2 Replies)
Discussion started by: jibberish
2 Replies

6. Ubuntu

expect script for random password and random commands

Hi I am new to expect. Please if any one can help on my issue its really appreciable. here is my issue: I want expect script for random passwords and random commands generation. please can anyone help me? Many Thanks in advance (0 Replies)
Discussion started by: vanid
0 Replies

7. AIX

Problem with NFS mount and network configuration between AIX and Windows 2003 servers

I ‘m beginner on unix I want to move an unix aix post 5.2 on distant site for use catia V4 with a foundation of data accommodated by a serveur windows 2003 and an environment accommodated on the serveur aix. The computer was linked up by IP (122.0.0.8) with waiter 2003 (via NFS) and the waiter... (8 Replies)
Discussion started by: astiaous
8 Replies

8. Web Development

NFS file sharing among web servers

I'm exploring the possibility of load balancing 2 web servers and have both access an NFS share on an NFS server. I'm wondering which types of data would need to reside on the webservers and the NFS server. Would the entire web directory (HTML, CSS, images, documents) all reside in the NFS server... (1 Reply)
Discussion started by: gaspol
1 Replies

9. Shell Programming and Scripting

Telnet script to test open ports on mult servers

Hello All, Can somebody help me with this script. I have an output file with a list of servers ips and ports. I need to be able to run this script to list all the server ips in the outfile and find out if the port is open or not. #!/bin/sh IFS=#;for i in $(cat portTest); do # check... (2 Replies)
Discussion started by: liketheshell
2 Replies

10. UNIX for Advanced & Expert Users

NFS and NIS reserved ports

Does anyone know how to assign rpc ports to NFS or NIS processes on Solaris please ? Thanks, Michael Chnader (0 Replies)
Discussion started by: mchnaider
0 Replies
Login or Register to Ask a Question