Configure iptables to only allow nfs and ssh services

1. modify the configuration file/etc/services (vi/etc/services) and add it to the row: mountd925/tcp # mountd process (you can change 925 to another available port) mountd925/udp2: modify the iptables configuration file/etc/sysconfig/iptables (vi/etc/sysconfig/iptables) 1. modify the configuration file/etc/services (vi/etc/services)
Add row: mountd 925/tcp # mountd process (change 925 to another available port)
Mountd 925/udp

2. modify IptablesConfiguration file/etc/sysconfig/ Iptables(Vi/etc/sysconfig/iptables)
The content is as follows:
* Filter
: Input accept [0: 0]
: Forward accept [0: 0]
: Output accept [0: 0]
-A input-p icmp -- icmp-type any-j ACCEPT
-A input-m state -- state ESTABLISHED, RELATED-jACCEPT
-A input-p tcp -- dport 2049-jACCEPT
-A input-p udp -- dport 2049-j ACCEPT
-A input-p udp -- dport 111-j ACCEPT
-A input-p tcp -- dport 111-j ACCEPT
-A input-p udp -- dport 925-j ACCEPT
-A input-p udp -- dport 925-j ACCEPT
-A input-p tcp -- dport 22-j ACCEPT
-A input-j REJECT -- reject-with icmp-host-prohibited
COMMIT

3. restart iptables (/etc/rc. d/init. d/iptables restart)

4. restart the client server