Home_greyopenFATE - openSUSE feature tracking > #312854
Dashboard | Search | Sign up | Login

Please login or register to be able to edit or vote this feature.

make nfs-server and nfs-client setup in YaST themselves deal with the Firewall

Feature state

openSUSE 12.1
openSUSE Distribution


when setting up a NFS Server or a NFS client, you can tick "open firewall port" That is really convinient. But there are also other services involved with NFS, which also require some modifications to the firewall.
As far as I understood (I do not have that much clue about all this), it is rpc.mountd and rpc.statd, which need to go through the firewall as well. So the normal user (like me) is not able to setup NFS at home, without switching off the firewall completely as it seems like that you can not force these two services to use ports, which you specify as open.
Switching off the firewall completely is a workaround but it leaves a bitter taste, as it lowers the security.

So it would be cool, if YaST could take care of all services related to NFS in terms of firewall settings and also the settings coming from the NFS setup

User benefit:

it would increase the security of the system if you do not need to switch off the firewall completely. And of course it would make YaST and openSUSE even better, as this then fullfills the promise, YaST makes as an convinient tool.


icons/user_comment.png B. L. wrote: (6 years ago)

Absolutely. Setting up a home/soho nfs share is not a trivial exercise, even if Yast does most of the job.

icons/user_comment.png L. N. wrote: (6 years ago)

All requires ports are listed in /etc/sysconfig/SuSEfirewall2.d/services/nfs-kernel-server already

icons/user_comment.png S. E. wrote: (6 years ago)

ok... but why does YaST not open them, when I tick "open firewall port"?
On my system NFS only works without firewall right now. I could not figure out how to do it with enabled firewall.

Is this behaviour maybe a bug, which should be reported?

Last change: 6 years ago
Score: 7
  • Negative: 0
  • Neutral: 0
  • Positive: 7
Feature Export
Application-xmlXML   Text-x-logPlaintext   PrinterPrint