From owner-freebsd-net@FreeBSD.ORG  Fri Sep 19 00:15:03 2008
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 87B191065671
	for <freebsd-net@freebsd.org>; Fri, 19 Sep 2008 00:15:03 +0000 (UTC)
	(envelope-from kungfujesus06@gmail.com)
Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.227])
	by mx1.freebsd.org (Postfix) with ESMTP id 3FB9F8FC0A
	for <freebsd-net@freebsd.org>; Fri, 19 Sep 2008 00:15:03 +0000 (UTC)
	(envelope-from kungfujesus06@gmail.com)
Received: by wr-out-0506.google.com with SMTP id c8so25959wra.27
	for <freebsd-net@freebsd.org>; Thu, 18 Sep 2008 17:15:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:to
	:subject:mime-version:content-type;
	bh=f3BnD/nU18Jg9J6uxJ20eXHj+OM8cQV/oF+a1CF7T+s=;
	b=jryXpoA4OGFbYpPp0iZFORdjCRdxJKlnz0UZid/7NH7oP9BXjy2twJnirQJimlLHCO
	ND2V6lZLLdUVkVFOX4YcFt9ZJ/KzruZ4eWFc2ZXCh75i5N1j4H+AMsRYZAA3De3D0wb2
	BPlTQGEcb76Y0PBxL6U9bzN/sqWGBD4Ne4RQU=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:mime-version:content-type;
	b=S5J9obzLFEK4k4gNohOzwoHSCnpkBjmjrS186/wDx8rjWitskgb78bBfntr/5X8A4b
	DP8oCKUgo+J4t9mwsCJvjTuhN3iTKHx7MJf0gIgp+4GmeVqyDLrQ25rnIPKWhYnbpkLV
	fsnFBRqbwfgSaJaED++e/h7cXBwoF/aiaYZCg=
Received: by 10.150.228.12 with SMTP id a12mr2172012ybh.141.1221781467317;
	Thu, 18 Sep 2008 16:44:27 -0700 (PDT)
Received: by 10.150.177.6 with HTTP; Thu, 18 Sep 2008 16:44:27 -0700 (PDT)
Message-ID: <96af083b0809181644o6136af1fybf0110f227f04f3b@mail.gmail.com>
Date: Thu, 18 Sep 2008 19:44:27 -0400
From: "Adam Stylinski" <kungfujesus06@gmail.com>
To: freebsd-net@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: Question regarding NFS
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Sep 2008 00:15:03 -0000

Hello,
      I am running an IPCop firewall for my entire network.  I have a
wireless network device on the blue subnet which must access a freebsd NFS
server.  In order to do this, I need to open a DMZ pinhole on a few select
ports.  It's my understanding that NFS chooses random ports and I was
wondering if there was a way I could fix this.  There is a good reason that
the subnet for the wireless is separate from the wired and I'd rather not
configure this thing over a VPN.  The client connecting to the NFS server is
a voyage computer (pretty much a small debian).  Also, if at all possible,
I'd like to keep performance reasonably high when large volumes of clients
are connecting to the NFS server, I'm not sure if binding to one port may or
may not make this impossible.  I apologize for my stupidity and lack of
understanding when it comes to NFS.  Any help would be gladly appreciated,
guys.