Vincent Mortellaro wrote:Hi, I had some issues running NFS on a SuSE server through iptables a while back. A few things you might try: 1. Make sure you have udp and tcp port 111 and udp 2049 open. My configuration doesn't seem to need the 4000-4003 ports. 2. Tale a look in your /var/log/messages file and see if you are getting any other errors from either iptables or the kernel itself. Usually this error is secondary to another problem. 3. Make sure statd is running on both the clients and the server. YaST2 doesn't seem to know which supporting services you need and won't start them automatically.
Ultimately it's best to write your own script. YaST2 is a very good tool to configure most services (better in my opinion than the Redhat tools) but it is terrible for iptables. I'm sure the default script is very good (it's enormous and even I don't know what they're doing in some sections) but the gui configuration options are far too broad and ambiguous to be useful. That said, writing your own script requires a fairly good understanding of iptables commands and how netfilter works. It takes some time and you really want to practice on an unimportant system before letting your scripts loose on a production network. I'd recommend trying to get the YaST2 configuration working first, then you have time to learn to use iptables the right way. If you do decide to write your own script start by reading Oskar's tutorial: http://iptables-tutorial.frozentux.net/ Good luck and let me know how it goes. Jeff |
