While some ports for NFS are static, others are dynamic and determined by the portmapper. If you want to use a layer 4 firewall, you'll need to define the range that RPC is assigned.
This post goes into some detail on what I'm referring to: 11.4. NFS File Server