# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-iptables-virtual-udp-nfs-servers-F9,v 1.2 2008/03/06 07:12:34 pb22 Exp $
# patch to allow UDP replies from virtual NFS servers
# patch-file matches : 2049.-s.128.232.1.212
# patch-file distmatches = Fedora.release.[89]
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/sysconfig/iptables	2008-02-07 08:01:03.000000000 +0000
+++ /etc/sysconfig/iptables	2008-02-07 08:03:24.000000000 +0000
@@ -9,1 +9,4 @@
 -A INPUT -i lo -j ACCEPT
+#2 cl.cam.ac.uk: Allow UDP NFS from servers which reply from the wrong address (so not ESTABLISHED)
+-A INPUT -p udp -m udp --sport 2049 -s 128.232.1.212 -j ACCEPT
+-A INPUT -p udp -m udp --sport 2049 -s 128.232.104.33 -j ACCEPT
