Hong Tian wrote:

I am working with a NFS server on Red Hat 7.3. For secure reason I want to
use IPCHAINS to restrict TCP/UDP ports. Now the question is that how many
ports should be opened for a NFS server? only port 111, port 635, and port
2049?

I recommend this strategy:


Allow access to the interface from trusted clients (the ones using NFS).
Allow access to the specific ports you want to make available from 0/0.
Deny everything else.

Illustrations of this type of setup in my own scripts:
https://home.dragonsdawn.net/~gordon/firewalls/fw-config.test
https://home.dragonsdawn.net/~gordon/firewalls/ez_ip_tables.init

... Just some neat stuff I'm playing with. I need to rename those scripts. ;)



--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to