Re: NFS connection dropped
Simon Edwards <[email protected]>
| Newsgroups | gmane.network.guarddog |
|---|---|
| Message-ID | <[email protected]> |
Hello, On Friday 02 September 2005 14:08, Dr. Michael J. Chudobiak wrote: > So... ideally the developer would modify GD to become aware of and open > portmap-assigned ports for enabled services. Whether that's actually > possible, I have no idea! But it would be an extremely useful feature... It gets very tricky very quickly. You can look up the allocated port numbers on the machine that is running Guarddog, but that doesn't really work when you want to connect (as a client) to a remote NFS share. (= need the port numbers for the remote machine). And it doesn't work when Guarddog is on a gateway machine and NFS is just passing through Guarddog. In that case you need to know the port numbers for the NFS servers on either side of the gateway. very ugly. NFS was put together before firewalls were a concern, which is why it sucks so much. The only remotely practical solution is to pin down the ports numbers on all of your NFS machines. cheers, -- Simon Edwards | Guarddog Firewall [email protected] | http://www.simonzone.com/software/ Nijmegen, The Netherlands | "ZooTV? You made the right choice." ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf