diff --git a/doc/create_services.sh b/doc/create_services.sh index f987cd1..16a6489 100644 --- a/doc/create_services.sh +++ b/doc/create_services.sh @@ -352,7 +352,7 @@ server_nfs_ports="many" client_nfs_ports="500:65535" service_nfs_type="complex" service_nfs_notes=" -The NFS service queries the RPC service on the NFS server host to find out the ports nfsd and mountd are listening. +The NFS service queries the RPC service on the NFS server host to find out the ports nfsd, mountd, lockd and rquotad are listening. Then, according to these ports it sets up rules on all the supported protocols (as reported by RPC) in order the clients to be able to reach the server.

@@ -784,7 +784,7 @@ cat <<"EOF" SourceForge Logo - $Id: create_services.sh,v 1.44 2004/07/29 22:31:15 ktsaou Exp $ + $Id: create_services.sh,v 1.45 2004/09/10 21:36:27 ktsaou Exp $

FireHOL, a firewall for humans...
© Copyright 2003 diff --git a/firehol.sh b/firehol.sh index addf1a9..9aa691a 100755 --- a/firehol.sh +++ b/firehol.sh @@ -10,7 +10,7 @@ # # config: /etc/firehol/firehol.conf # -# $Id: firehol.sh,v 1.198 2004/08/21 21:07:09 ktsaou Exp $ +# $Id: firehol.sh,v 1.199 2004/09/10 21:36:26 ktsaou Exp $ # # Remember who you are. @@ -855,6 +855,7 @@ rules_nfs() { return 1 fi + local server_rquotad_ports="`${CAT_CMD} "${tmp}" | ${GREP_CMD} " rquotad$" | ( while read a b proto port s; do echo "$proto/$port"; done ) | ${SORT_CMD} | ${UNIQ_CMD}`" local server_mountd_ports="`${CAT_CMD} "${tmp}" | ${GREP_CMD} " mountd$" | ( while read a b proto port s; do echo "$proto/$port"; done ) | ${SORT_CMD} | ${UNIQ_CMD}`" local server_lockd_ports="`${CAT_CMD} "${tmp}" | ${GREP_CMD} " nlockmgr$" | ( while read a b proto port s; do echo "$proto/$port"; done ) | ${SORT_CMD} | ${UNIQ_CMD}`" local server_nfsd_ports="`${CAT_CMD} "${tmp}" | ${GREP_CMD} " nfs$" | ( while read a b proto port s; do echo "$proto/$port"; done ) | ${SORT_CMD} | ${UNIQ_CMD}`" @@ -869,6 +870,12 @@ rules_nfs() { dst="dst ${x}" fi + if [ ! -z "${server_rquotad_ports}" ] + then + set_work_function "Processing rquotad rules for server '${x}'" + rules_custom "${mychain}" "${type}" nfs-rquotad "${server_rquotad_ports}" "500:65535" "${action}" $dst "$@" + fi + set_work_function "Processing mountd rules for server '${x}'" rules_custom "${mychain}" "${type}" nfs-mountd "${server_mountd_ports}" "500:65535" "${action}" $dst "$@" @@ -4274,7 +4281,7 @@ case "${arg}" in else ${CAT_CMD} < FireHOL is distributed under GPL. @@ -4460,7 +4467,7 @@ then ${CAT_CMD} < FireHOL is distributed under GPL. Home Page: http://firehol.sourceforge.net @@ -4754,7 +4761,7 @@ then ${CAT_CMD} >&2 < FireHOL is distributed under GPL. Home Page: http://firehol.sourceforge.net @@ -4837,7 +4844,7 @@ EOF echo "# " ${CAT_CMD} < # FireHOL is distributed under GPL. # Home Page: http://firehol.sourceforge.net