LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-28-2012, 02:10 PM   #1
gadikota
LQ Newbie
 
Registered: Dec 2010
Posts: 26

Rep: Reputation: 0
NFS mount issue through firewall !!!!


Team,

I have Data Domain with nfs shares created and exported to the SLES 11 server. We are trying to mount using the mount -t -o <options> DDIP:/backup <mount> and it times out after few minutes. We figured that its a firewall issue. I have been reading lot about the nfs ports and looks like the important once are 111 (portmapper) and the 2049 (nfsd). But the rpcinfo -p on the client shows more TCP and UDP ports for nlockmgr and mountd. Should i open those ports as well in firewall ?

Another question is which way should be the rule implemented.

1) Allow bidrirection on ports 2049 & 111.
2) Allow 2049 & 111 ports from client to server.
3) Allow 2049 & 111 ports from server to client.

client:~ # rpcinfo -p
program vers proto port service
100000 4 tcp 111 portmapper
100000 3 tcp 111 portmapper
100000 2 tcp 111 portmapper
100000 4 udp 111 portmapper
100000 3 udp 111 portmapper
100000 2 udp 111 portmapper
100024 1 udp 45488 status
100024 1 tcp 61417 status
100005 1 udp 59794 mountd
100005 1 tcp 30015 mountd
100005 2 udp 59794 mountd
100005 2 tcp 30015 mountd
100005 3 udp 59794 mountd
100005 3 tcp 30015 mountd
100021 1 udp 51229 nlockmgr
100021 3 udp 51229 nlockmgr
100021 4 udp 51229 nlockmgr
100021 1 tcp 2283 nlockmgr
100021 3 tcp 2283 nlockmgr
100021 4 tcp 2283 nlockmgr
100003 2 tcp 2049 nfs
100003 3 tcp 2049 nfs
100003 4 tcp 2049 nfs
100003 2 udp 2049 nfs
100003 3 udp 2049 nfs
100003 4 udp 2049 nfs
client:~ # ps -ef | grep nfs
root 15440 2 0 05:51 ? 00:00:00 [nfsd4]
root 15441 2 0 05:51 ? 00:00:00 [nfsd]
root 15442 2 0 05:51 ? 00:00:00 [nfsd]
root 15443 2 0 05:51 ? 00:00:00 [nfsd]
root 15444 2 0 05:51 ? 00:00:00 [nfsd]
root 15459 2 0 05:51 ? 00:00:00 [nfsiod]
root 15555 1 0 06:06 ? 00:00:00 /sbin/mount.nfs server:/backup /dd/server/share -o rw,hard,intr,nfsvers=3,tcp,bg
root 16615 16284 0 18:08 pts/0 00:00:00 grep nfs
client:~ #


Any help would be much appreciated.

Thanks
Balu Gadikota
 
Old 08-28-2012, 02:26 PM   #2
frieza
Senior Member
 
Registered: Feb 2002
Location: harvard, il
Distribution: Ubuntu 11.4,DD-WRT micro plus ssh,lfs-6.6,Fedora 15,Fedora 16
Posts: 3,202

Rep: Reputation: 397Reputation: 397Reputation: 397Reputation: 397
if you can ssh into the machine than you have two possibilities,
1) install and use FUSE SSHFS instead of NFS
2) create an SSH tunnel to forward the NFS port
otherwise yes, the ports probably should be opened
 
1 members found this post helpful.
Old 08-28-2012, 02:37 PM   #3
gadikota
LQ Newbie
 
Registered: Dec 2010
Posts: 26

Original Poster
Rep: Reputation: 0
Thank you Frieza.

Unfortunately i cant install anything other than opening the ports. I was more looking towards which ports needs to be open other than 111 and 2049 and should it be open from client to server or from server to client.
 
Old 08-28-2012, 02:51 PM   #4
frieza
Senior Member
 
Registered: Feb 2002
Location: harvard, il
Distribution: Ubuntu 11.4,DD-WRT micro plus ssh,lfs-6.6,Fedora 15,Fedora 16
Posts: 3,202

Rep: Reputation: 397Reputation: 397Reputation: 397Reputation: 397
i think those are the only ports necessary
 
Old 08-28-2012, 02:55 PM   #5
gadikota
LQ Newbie
 
Registered: Dec 2010
Posts: 26

Original Poster
Rep: Reputation: 0
Which direction..from client to server to server to client or bidirectional ?

Thanks
 
Old 08-28-2012, 03:05 PM   #6
frieza
Senior Member
 
Registered: Feb 2002
Location: harvard, il
Distribution: Ubuntu 11.4,DD-WRT micro plus ssh,lfs-6.6,Fedora 15,Fedora 16
Posts: 3,202

Rep: Reputation: 397Reputation: 397Reputation: 397Reputation: 397
i would start with client to server, but if that doesn't work try bidirectional
 
Old 08-28-2012, 04:25 PM   #7
lleb
Senior Member
 
Registered: Dec 2005
Location: Florida
Distribution: CentOS/Fedora
Posts: 2,630

Rep: Reputation: 495Reputation: 495Reputation: 495Reputation: 495Reputation: 495
are you able to ssh into the server from the client?

again if so as you are not willing to use sshfs a reverse ssh connection will solve the problem without having to deal with installing anything more. just requires an ssh connection from the server to the client.
 
Old 08-28-2012, 06:12 PM   #8
gadikota
LQ Newbie
 
Registered: Dec 2010
Posts: 26

Original Poster
Rep: Reputation: 0
Hello Lleb,

I just tried .. i cant ssh from client to the server.

will look for opening the firewall ports and see if that fixes my issues.

Thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
NFS server mount issue DD554 Linux - Networking 4 05-06-2010 06:20 AM
NFS mount issue neelakantam Linux - Server 4 09-19-2008 10:24 AM
NFS Mount to Server behind Firewall bigfoilin Linux - General 1 10-23-2007 04:06 PM
NFS remote mount issue UltraSoul Solaris / OpenSolaris 2 10-23-2006 01:22 AM
nfs mount issue cwwilson721 Slackware 4 07-10-2006 04:44 AM


All times are GMT -5. The time now is 12:31 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration