Re: nfs-kernel-server and firewalls

[Alvin Oga <aoga@ns.Linux-Consulting.com>]

On Fri, 2 Jul 2004, Tom Allison wrote:

> /etc/exports:
> /var/www        192.168.1.0/24(rw,no_root_squash)
> 
> These are identical on both machines
> /etc/hosts.allow is identical on both machines (empty)

to allow only certain machines to connect and disallow others

on the NFS server:

server:/etc/exports
	#var/www	192.168.1.1(rw,no_root_squash,sync)
	/var/www	192.168.1.1(rw,sync)	--> better

server:/etc/hosts.deny
	ALL : ALL

server:/etc/hosts.allow
	# range or specific ip#
	mountd:         192.168.1.0/255.255.255.0
	portmap:        192.168.1.0/255.255.255.0

---------

client:/etc/hosts.deny
	ALL : ALL

client:/etc/hosts.allow
	mountd:         192.168.1.0/255.255.255.0
	portmap:        192.168.1.0/255.255.255.0


--- restart inetd on both boxes, and nfsserver on the server

client# mount server:/var/www /mnt/test
	touch /mnt/test/can-i-write-a-file.txt

otherPCs ... cannot mount the server ...

-- add firewall rules later

c ya
alvin