Current-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: netbsd-5 and NFS-booted ipfilter firewall

At 1:10 Uhr -0500 22.2.2009, Louis Guillaume wrote:
>On netbsd-5, my firewall hangs after installing NAT rules for ipfilter.
>The firewall is netbooted.

Uhh... Sit on branch, have saw?

>Turn ipfilter off and the machine boots
>without interruption. Revert to netbsd-4 and everything works properly.

And the rule sets are?

>After reading a few threads that seem similar, I experimented with
>setting nfsd to run udp-only, but that didn't help.

Like any RPC, nfs is tricky to pass through a packet filter, in that you
need to enable something like ports [512,1024] in addition to rpc and nfs -
or ask the nfs server rpcbind for the ports used by nfs.


"It's never straight up and down"     (DEVO)

Home | Main Index | Thread Index | Old Index