[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freebsd-hackers
Subject:    NFS over TCP
From:       spork <spork () super-g ! com>
Date:       1998-03-31 22:34:50
[Download RAW message or body]

Hi,

It's my understanding that NFS in -stable can be run with TCP as the
transport rather than UDP.

As an exercise in firewalling, I'm trying to make the entire nfs suite
work over TCP, as it seems easier to control than UDP.  Looking at
rpcinfo, mountd, portmapper, and nfsd all listen on TCP ports, and
telnetting to these ports shows that there is indeed something there
listening:

   program vers proto   port
    100000    2   tcp    111  portmapper
    100000    2   udp    111  portmapper
    100003    2   udp   2049  nfs
    100003    3   udp   2049  nfs
    100003    2   tcp   2049  nfs
    100003    3   tcp   2049  nfs
    100005    3   udp    967  mountd
    100005    3   tcp   1012  mountd
    100005    1   udp    967  mountd
    100005    1   tcp   1012  mountd

However, if I disallow UDP traffic between the nfs server and client, I
see a whole bunch of UDP packets denied by ipfw.  I have started nfsd with
the "-t" flag on the server, and am specifying a version 3 tcp mount on
the client.  Is it possible to actually disable udp in mountd and portmap?
I couldn't find a flag for this in the manpages...

Thanks for any info,

C

Charles Sprickman
spork@super-g.com
---- 
                           "I'm not a prophet or a stone-age man
                           Just a mortal with potential of a superman
                           I'm living on"      -DB


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message

[prev in list] [next in list] [prev in thread] [next in thread]