IPFILTER and NFS

[Erik Nørgaard]

Matt Juszczak wrote:
> I dont have access to the nfs server... only the client.  Your 
> configuration info showed me making changes on the server.  is there a 
> way to make the client work ok?

Just let your client connect to any port on the server - keep state so 
you can block incoming connections:

pass out quick on <interface> proto tcp from <client>/32 \
     to <nfs-server>/32 flags S keep state
pass out quick on <interface> proto udp from <client>/32 \
     to <nfs-server>/32 keep state

Erik
-- 
Ph: +34.666334818                           web: http://www.locolomo.org
S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt
Subject ID:  A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9
Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2