WebNFS Developer's Guide

How Do I Access an Internet NFS Server Through My Firewall?

If the NFS server supports WebNFS and TCP connections for NFS, then have your firewall administrator provide access for outgoing connections to port 2049. If the server does not support WebNFS, then access will be much difficult since the client will have to use the MOUNT protocol to obtain an initial filehandle; however, this protocol does not use a "well-known" port. This makes it almost impossible to configure the firewall to allow NFS mounts unless the firewall software supports some kind of portmap protocol snooping.