Because portmap(8) dynamically assigns the mountd(8) port, how would one write a pass rule in pf for mountd(8) traffic? My problem is that every time mountd(8) is re/started, it operates on a different port and my fixed pf rules block the mount protocol and, consequently, my clients cannot mount an NFS share.
I read through RFC1094 "NFS: Network File System Protocol Specification" and RFC1057 "RPC: Remote Procedure Call Protocol Specification" looking for ways to statically bind the mount protocol to a port number. It doesn't look possible. -pachl