Forum Debian Users Gang

# /etc/exports: the access control list for filesystems which may be exported
#        to NFS clients.  See exports(5).
#
# Example for NFSv2 and NFSv3:
# /srv/homes       hostname1(rw,sync,no_subtree_check) hostname2(ro,sync,no_subtree_check)
#
# Example for NFSv4:
# /srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
# /srv/nfs4/homes  gss/krb5i(rw,sync,no_subtree_check)
#

/home/james *(rw)
/media/xxx 192.168.1.2(ro)

exportfs: /etc/exports [2]: Neither 'subtree_check' or 'no_subtree_check' specified for export "*:/home/james".
  Assuming default behaviour ('no_subtree_check').
  NOTE: this default has changed since nfs-utils version 1.0.x

exportfs: /etc/exports [3]: Neither 'subtree_check' or 'no_subtree_check' specified for export "192.168.1.2:/media/xxx".
  Assuming default behaviour ('no_subtree_check').
  NOTE: this default has changed since nfs-utils version 1.0.x

(przykładowo HOME z lapka)
mount -t nfs 192.168.1.2/home/james/ /media/nfs/home

mount 192.168.1.1:/home/james/ /media/nfs/home/
mount.nfs: mount to NFS server '192.168.1.1' failed: System Error: Connection refused

#! /bin/sh
# /etc/init.d/blah
#

# Some things that run always
touch /var/lock/firewall

# Carry out specific functions when asked to by the system
case "$1" in
  start)
    echo "Starting firewall "
    iptables -F
    iptables -t nat -F
    iptables -t mangle -F
    iptables -X

    iptables -A INPUT -i lo -j ACCEPT

    iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

    iptables -P INPUT DROP

    iptables -A INPUT -p TCP --dport 8080 -s 192.168.0.0 -j ACCEPT

    iptables -t nat -A PREROUTING -p tcp --dport 6881:6889 -j DNAT --to-destination 192.168.1.2
    iptables -A FORWARD -s 192.168.2.2 -p tcp --dport 6881 -j ACCEPT
    iptables -A FORWARD -s 192.168.1.2 -p tcp --dport 6882 -j ACCEPT
    iptables -A FORWARD -s 192.168.1.2 -p udp --dport 6889 -j ACCEPT

    iptables --table nat --append POSTROUTING --out-interface ppp0 -j MASQUERADE
    iptables --append FORWARD --in-interface wlan0 -j ACCEPT
    iptables --append FORWARD --in-interface eth0 -j ACCEPT

    iptables -A INPUT --source 192.168.1.2 -j ACCEPT
    iptables -A INPUT --source 192.168.1.3 -j ACCEPT
    iptables -A INPUT --source 192.168.1.4 -j ACCEPT
    iptables -A INPUT --source 192.168.2.2 -j ACCEPT

    echo 1 > /proc/sys/net/ipv4/ip_forward
    ;;
  stop)
    echo "Stopping firewall"
    iptables -F
    iptables -t nat -F
    iptables -t mangle -F
    iptables -X

    iptables -P INPUT ACCEPT
    echo 0 > /proc/sys/net/ipv4/ip_forward
    ;;
  *)
    echo "Usage: /etc/init.d/blah {start|stop}"
    exit 1
    ;;
esac

exit 0