Modifying your ipchains script to work with AFS

• AFS uses several UDP ports in the 7000 range, as well as some randomly allocated UDP ports above port 1024.
• Add the following rule to open up your firewall to UDP access from the PPPL AFS servers (lyman and draco):

  #allow udp connections from lyman and draco for afs
  ipchains -A input -j ACCEPT -i eth0 -s 198.35.4.70 --dport 1024:65535 -p udp
  ipchains -A input -j ACCEPT -i eth0 -s 192.55.106.95 --dport 1024:65535 -p udp
  

  If you are interested in using AFS resources in other cells (nersc.gov, etc) then you'll need to allow the same access from their AFS cell servers (check /usr/vice/etc/CellServerDB for a list of cells and their servers).
• The PPPL firewall does not prevent AFS access to PPPL, so you don't need to authenticate to use the AFS filesystem! (However, you do need to authenticate to use certain binaries which require a FlexLM server).
• To start afs, use service afs start, and add it to boot time scripts with chkconfig --add afs.