Re: How to configure npf to restrict nfs to localhost

[Mayuresh <mayuresh%acm.org@localhost>]

On Mon, Jun 29, 2020 at 10:00:06AM +0530, Mayuresh wrote:
> Any hints for how to block these ports for outside world and keep open for
> localhost?

Tried:

group "external" on $ext_if {
    ...
    block final to any port 111
    block final to any port 2049
    ...


This kind of works. I can telnet to the port from localhost. From outside
it doesn't say connection refused, it just hangs instead. Obviously I am
missing something.

Mayuresh