To perform meaningful firewalling of NFS services the ports on the server need to be locked down instead of random assignment. The quota package 3.08 and above support this for rquotad. RHL9 ships 3.06 even though 3.08 came out in Novemember 2002. This bug is being created to ensure that the package is updated before the next release. Home page and tarball: http://sourceforge.net/projects/linuxquota
I just checked rawhide and the current version is still 3.06. Are there any issues with upgrading to 3.08+