Use NFS through a firewall

tlemons · 12-10-2010, 02:58 PM

A while back, one of my users asked me to set up external access (from outside our lab) to our lab file server via NFS. I figured out how to do this by enabling the following on our firewall:

TCP RPC (port 111) to the file server
UDP RPC (port 111) to the file server
TCP NFS (port 2049) to the file server
UDP MOUNT (port 1020) to the file server

This works and will stay working as long as the file server’s port mapping doesn’t change. If it does, I’ll need to figure out how to ‘nail these down’ on the file server.

FYI
tl

AlucardZero · 12-10-2010, 03:34 PM

111 and 2049 won't change.

The mountd port probably will. You can nail that down but it would help if you told us what distro the file server is running.

tlemons · 12-10-2010, 03:48 PM

Hi Alucard

I'm using RHEL V5.5.

Thanks
tl

AlucardZero · 12-10-2010, 05:04 PM

Edit /etc/sysconfig/nfs. Find the line with MOUNTD_PORT, uncomment it, and change it to something (1020, perhaps?). Restart NFS.

Not sure if you need to set STATD_PORT or LOCKD_*PORT. Try it!