Firewall headaches with NFS