This had nothing to do with Netfilter. It appears that the NFS server failed to accept connections from anyone (even though there were already established connections). Restarting NFS solved my problem. > -----Original Message----- > From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter- > bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Gary W. Smith > Sent: Monday, November 20, 2006 2:18 PM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: iptables/bridge/nfs > > I'm trying to get NFS (udp) to work through an iptables firewall that > also has a bridge. > > The bridge is eth0 and eth2. The NFS server resides on eth3, the client > exist on eth2 the internet is on eth0. My iptables contains this as the > FORWARD rule: > > -A FORWARD -m physdev --physdev-in eth2 -j ACCEPT > > -A FORWARD -i eth3 -j ACCEPT > > We did have it locked down pretty much but we want to try to find out > why this doesn't work. Some posts say that if the MTU is different then > it might fragment but in this case they are both 1500. > > Does anyone have any basic ideas why this might not be working? > > Gary Wayne Smith >
