NFS and firewall in Fedora 8 environment
 

Hi all,
1 Can somebody explain the difference between PORTMAP and RPCbind ?
2 When I disable IPtables from the command line, then NFS functions
normally BUT
3 When (with IPtables started) I configure the firewall from the GUI tool (System --> Administration --> Firewall) to allow NFS as trusted service, and this is done of BOTH client and NFS server machine) then I get the famous " no route to host " error.

Then I am also unsure how NFS works in Fedora 8... is RPCbind something new or what is it ?
Do the nfs ports have to configured as static ?

I have read and looked around for docs and howto's etc. but I can not find any explanations or clear directives regarding this issue.

Can you please help ?

Thanks.
dan

nfs uses dynamic port allocation from portmap to decide which ports to use between the client and the server. This is no use if you want to firewall it without a lot of complexity.if you edit /etc/sysconfig/nfs and uncomment various lines there you can assign fixed ports which you can directly open up in iptables.

Thanks acid_kewpie for your reply.
Sorry if I sound a bit dumb, but I don't understand the difference between PORTMAP and RPCbind. Are they two completely different technologies implementations which Fedora chose to switch (cuz used to be portmap before Fedora 7) or is it the same darn thing with just a fancy name change ... and do I have to edit the /etc/hosts.allow and hosts.deny with RPCbind the same way I would done as I used to do with PortMap ?
What would the exact syntax then be for RPCbind ?
chhers,

They basically just changed the name from what I believe. Can't remember the exact stoy, but it's the same role it plays.

you wouldn't need to edits hosts.allow or anything, just the /etc/sysconfig/nfs file as I stated above.