I did the followings (198.138.244.0 is local network address), but nfs still
does not work. Should I manually modify /etc/sysconfig/ipchains?

lan='198.138.244.0/255.255.255.0'
ipchains --append input --protocol tcp --source $lan nfs --jump ACCEPT
ipchains --append input --protocol udp --source $lan nfs --jump ACCEPT
ipchains --append output --protocol tcp --destination $lan nfs --jump ACCEPT
ipchains --append output --protocol udp --destination $lan nfs --jump ACCEPT
service ipchains save


-----Original Message-----
From: Anthony E. Greene [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 02, 2002 1:47 AM
To: [EMAIL PROTECTED]
Subject: Re: ipchains


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01-Oct-2002/16:23 -0400, Hong Tian <[EMAIL PROTECTED]> wrote:
>After installing RedHat 7.3 with Medium Security Level. The nfs is REJECT
by
>Ipchains. In order to allow mounting to another server, I need to set up
>with ACCEPT tcp/udp nfs (port 2049).
[snip]

lan='192.168.0.0/255.255.255.0'
ipchains --append input --protocol tcp --source $lan nfs --jump ACCEPT
ipchains --append input --protocol udp --source $lan nfs --jump ACCEPT
ipchains --append output --protocol tcp --destination $lan nfs --jump ACCEPT
ipchains --append output --protocol udp --destination $lan nfs --jump ACCEPT
service ipchains save


The first line sets the $lan variable to the local network/netmask to
restrict NFS connections to your local network. The next 4 lines set the
ipchains rules. The last line saves the rules to /etc/sysconfig/ipchains,
where they will be read each time the ipchais service is started.

Tony
- -- 
Anthony E. Greene <mailto:[EMAIL PROTECTED]%3E>
OpenPGP Key: 0x6C94239D/7B3D BD7D 7D91 1B44 BA26  C484 A42A 60DD 6C94 239D
AOL/Yahoo Messenger: TonyG05    HomePage: <http://www.pobox.com/~agreene/>
Linux. The choice of a GNU generation <http://www.linux.org/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Anthony E. Greene <mailto:[EMAIL PROTECTED]> 0x6C94239D

iD8DBQE9mohtpCpg3WyUI50RAgBtAKCvI5BLBkqCkeAxcsHchPLrG5EyhQCcCNTM
pUYCdm6ErWWt/WinnpN7Pj8=
=988F
-----END PGP SIGNATURE-----





-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to