#! /usr/bin/patch -p0
# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-export-iptables,v 1.2 2007/05/27 12:39:28 pb22 Exp $
# patch to allow incoming NFS server requests
# patch-file matches = MOUNTD_PORT
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/sysconfig/iptables	2007-04-26 12:05:33.000000000 +0100
+++ /etc/sysconfig/iptables	2007-04-26 11:56:41.000000000 +0100
@@ -17,2 +17,10 @@
 -A RH-Firewall-1-INPUT -p udp -m udp --sport 2049 -s 128.232.104.33 -j ACCEPT
+#6 cl.cam.ac.uk: NFS server -- see MOUNTD_PORT in /etc/sysconfig/nfs
+-A RH-Firewall-1-INPUT -p udp -m udp --dport 111 -j ACCEPT
+-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 111 -j ACCEPT
+-A RH-Firewall-1-INPUT -p udp -m udp --dport 2049 -j ACCEPT
+-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 2049 -j ACCEPT
+-A RH-Firewall-1-INPUT -p udp -m udp --dport 2061 -j ACCEPT
+-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 2061 -j ACCEPT
+#
 -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
