Here are my settings:

On the client:

Nfs-server:/export1   - /export1   nfs   - yes soft,bg,intr,proto=udp

On PF firewall:
# NFS allowed
scrub in all no-df

#internal int
pass in on $int_if from $client to $server

#external int
pass out on $ext_if from $client to $server



Rami Sik

-----Original Message-----
From: Alexey Vatchenko [mailto:[EMAIL PROTECTED] On Behalf Of
Alexey Vatchenko
Sent: January 30, 2008 9:09 AM
To: Rami Sik
Cc: misc@openbsd.org
Subject: Re: export NFS mounted fs

Rami Sik wrote:
> Why don't you try mounting the exports on NFS server directly from NFS
> client? You should be using udp and put some special rules in PF as it
> has been suggested in the PF doc.

I didn't do it because it's not easy to update pf with appropriate port
numbers when mountd starts.

Unfortunately, i can't find anything regarding NFS (except scrubing).
Please, point me to what you mean.

Thanks.

--
Alexey Vatchenko
http://www.bsdua.org

Reply via email to