> >all of them.  The ports for 'portmapper' (111) and 'nfs' (2049) are
> >constant.  The others in general aren't.  Change your '/etc/exports' or
> >stop and re-start the daemons, and those ports will change.  But it's
> >been my experience on NetBSD that once '/etc/exports' is fixed, the
> >ports used by 'mountd', 'status', and 'nlockmgr' will also stay fixed.
> >But that not the case on other systems, like Linux.
> >
> >David S.
> 
> With changing port number IPsec seems like the only way out without 
> compromising security.

If you don't know a priori the IP addresses of the clients, and/or
you want encryption of the NFS traffic, that's probably so.  You
also might want to look at the Coda file system.  I've been planning
to try myself, but haven't gotten around to it yet.

David S.

>