Re: [gentoo-user] nfs and iptables

2006-06-23 Thread Arnau Bria
Hi, I solved it adding next at top of rules: -A INPUT -p tcp ! --syn -j ACCEPT -A INPUT -p udp -j ACCEPT for what I read, it allows my connections established to pass filter without evaluating other rules. Is this a correct config? Thanks to all for your attention, -- Arnau Bria http://bl

Re: [gentoo-user] nfs and iptables

2006-06-23 Thread Arnau Bria
On Fri, 23 Jun 2006 12:20:34 +0200 Rick van Hattem <[EMAIL PROTECTED]> wrote: > On Friday 23 June 2006 11:04, Arnau Bria wrote: > > Hi all, > > > > I'm trying to configure my firewall in order to be able to mount a > > remote NFS exported directory. > > > Have a look at the gentoo-wiki :) > http:/

Re: [gentoo-user] nfs and iptables

2006-06-23 Thread Rick van Hattem
On Friday 23 June 2006 11:04, Arnau Bria wrote: > Hi all, > > I'm trying to configure my firewall in order to be able to mount a > remote NFS exported directory. > Have a look at the gentoo-wiki :) http://gentoo-wiki.com/HOWTO_Share_Directories_via_NFS#Setting_Up_Firewall_.28Client_Side.29 -- Ric

Re: [gentoo-user] nfs and iptables

2006-06-23 Thread Arnau Bria
On Fri, 23 Jun 2006 12:38:13 +0300 (EEST) "Daniel Iliev" <[EMAIL PROTECTED]> wrote: > > On Fri, June 23, 2006 12:04 pm, Arnau Bria wrote: > [...] > My first guess is that you have another FW rule which matches those > packets and drops them before they meet the rule you mention. > You could try:

Re: [gentoo-user] nfs and iptables

2006-06-23 Thread Daniel Iliev
On Fri, June 23, 2006 12:04 pm, Arnau Bria wrote: > > Well, so I set next rule in my firewall: > -A INPUT -d 193.146.196.198 -i eth0 -p tcp -m tcp --dport 111 -j ACCEPT > -A INPUT -d 193.146.196.198 -i eth0 -p tcp -m tcp --dport 111 -j LOG > --log-prefix "NFS (tcp) Input: " --log-level 7 -A INPUT

[gentoo-user] nfs and iptables

2006-06-23 Thread Arnau Bria
Hi all, I'm trying to configure my firewall in order to be able to mount a remote NFS exported directory. AFAIK I must open port 111 tcp/udp (portmat). rpcinfo confirms it: # rpcinfo -p program vers proto port 102 tcp111 portmapper 102 udp111 portmapper