To support a broad set of NFS clients, Amazon EFS allows connections from any source port. If you require that only privileged users can access Amazon EFS, we recommend using the following client firewall rule. Connect to your file system using SSH and run the following command:
iptables -I OUTPUT 1 -m owner --uid-owner 1-4294967294 -m tcp -p tcp --dport 2049 -j DROPThis command inserts a new rule at the start of the OUTPUT chain (-I OUTPUT
1). The rule prevents any unprivileged, nonkernel process (-m owner --uid-owner
1-4294967294) from opening a connection to the NFS port (-m tcp -p tcp –dport
2049).
