[Bug 287977] ZFS NFS exports allows mounts by clients not in the list of /etc/exports (though the files are inaccessible anyway)

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 06 Jul 2025 01:55:08 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287977

--- Comment #7 from Rick Macklem <rmacklem@FreeBSD.org> ---
Just to start back at the beginning...

Go onto your NFSv4 server and as su/root, edit /etc/exports.
Replace the line
V4: /exports

with the two lines
V4: /exports -network 10.10.50.0/24
V4: /exports -network 192.168.200.0/24

leave the editor and type
service mountd reload

I am 90% sure this will fix your problem.

If it does and if after reading the discussion you think
the exports man page needs changes...
- Get an up-to-date source tree. I think
  git clone https://github.com/freebsd/freebsd-src
  will do it.
- Then go into usr.sbin/mountd and..
  # cp exports.5 exports.5.old
  - edit your changes to exports.5
  # diff -U999999 usr.sbin/mountd/exports.5.old usr.sbi/mountd/exports.5 >
your.patch
  (Or do it all with git, if you are a git type.)
- Then get a phabricator login (reviews.freebsd.org) and put "your.patch"
  there, with "rmacklem" and "manpages" as reviewers.

It can take a while for someone to look at it. Recall that most
of us do this as volunteers (I have never been paid $$$ by anyone
to work on FreeBSD.)

-- 
You are receiving this mail because:
You are the assignee for the bug.