[Bug 1359587] Re: nfs-kernel-server dynamic ports should be implemented as static by default

[Seth Arnold]

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nfs-utils in Ubuntu.
https://bugs.launchpad.net/bugs/1359587

Title:
  nfs-kernel-server dynamic ports should be implemented as static by
  default

Status in “nfs-utils” package in Ubuntu:
  New

Bug description:
  There might be historic reasons to explain this strange behavior, but nowadays, no one needs some dynamic/random service ports to be open on his/her system.
  The way to make these ports static is explained here: https://wiki.debian.org/SecuringNFS
  These guidelines should be ***natively configured*** on Ubuntu. It's easy to pick a port range which will never be assigned by IANA.
  On top of that,we would be able to control all NFS communications with ufw/gufw or any other firewall.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/1359587/+subscriptions