IP restriction for NFS

[machiasiaweb]

Hello,

I would like to know how to restrict the IP to mount NFS.

For example, I have setup a NFS mount point which restrict 2 IPs only to allow read/write. Following is the 'exports' config output

-----
#cat /etc/exports
V4: / -sec=sys
/mnt/storage1 -alldirs -maproot="nobody":"nobody" 192.168.20.149 192.168.20.147
----

However, the others out of the allow list IP still able to mount. Although it is not able to read inside

----- Following is the output ----
# mount -t nfs 192.168.20.151:/mnt/storage1/dir /mnt/nfs2
# ls /mnt/nfs2
ls: reading directory /mnt/nfs2: Input/output error
----------------------------------

I would like to know does there is any method to restrict even others out of range client to mount also?

Thanks!

 

[SweetAndLow]

http://doc.freenas.org/11/sharing.html#unix-nfs-shares

 

[machiasiaweb]

Hello,

Please find the screen capture. Others 192.168.20.x IP still can mount but not able to list inside.

Is that anything I missing?

Thanks!

 

[dlavigne]

Hello,

Please find the screen capture. Others 192.168.20.x IP still can mount but not able to list inside.

Is that anything I missing?

Thanks!

Is that after restarting the NFS service?