[SOLVED] mount nfs thru router

schneidz · 04-28-2009, 12:50 PM

hi, i am trying to nfs outside of my house.
i have a netgear wgr614v8 router. in the port forwarding section i map port 2049 to my linux machine.
here is the pertinent info about the server:

Code:

[schneidz@hyper schneidz]$ cat /etc/exports
/home/schneidz           192.168.5.100(rw,insecure,sync,all_squash,anonuid=500,anongid=500)
/media                   *(rw,insecure,sync)
/mnt/dos                *(rw,insecure,sync)
/tmp            (ro,insecure,all_squash)
[schneidz@hyper schneidz]$ cat /etc/hosts.allow
#
# hosts.allow   This file describes the names of the hosts which are
#               allowed to use the local INET services, as decided
#               by the '/usr/sbin/tcpd' server.
#
ALL: ALL
[schneidz@hyper schneidz]$ cat /etc/hosts.deny
#
# hosts.deny    This file describes the names of the hosts which are
#               *not* allowed to use the local INET services, as decided
#               by the '/usr/sbin/tcpd' server.
#
# The portmap line is redundant, but it is left to remind you that
# the new secure portmap uses hosts.deny and hosts.allow.  In particular
# you should know that NFS uses portmap!

i'm able to mount it ok from within the network but i cant mount my hard drive thru the router when i am away from home.
the successful mounts look like this in /var/log/messages:

Code:

Apr 28 13:31:46 pcp04663196pcs rpc.mountd: authenticated mount request from 192.168.5.3:740 for /media (/media)
Apr 28 13:31:59 pcp04663196pcs rpc.mountd: authenticated unmount request from 192.168.5.3:742 for /media (/media)
Apr 28 13:32:12 pcp04663196pcs rpc.mountd: authenticated mount request from 192.168.5.3:744 for /media (/media)
Apr 28 13:32:21 pcp04663196pcs rpc.mountd: authenticated unmount request from 192.168.5.3:746 for /media (/media)

the portmapper is giving a random port. there is no message for the unsuccessful attempts but it hangs for about 1 minute and then i keep getting this error:

Code:

mount: RPC: Remote system error - Connection refused

i tried forcing the port by stopping nfsd and running rpc.mountd -p 2049 but that didnt work.

is this possible ?

jschiwal · 04-29-2009, 05:54 AM

NFS isn't secure over the internet. Because it uses multiple ports and both tcp and udp, it doesn't fit inside an ssh tunnel. It would be better to use scp or sftp instead to download or upload files. There may be a way to force NFS4 to operate securely over the internet. That would take a lot of research and work. Scp is a lot easier.

There is also webDAV.

chrism01 · 04-29-2009, 07:50 AM

Maybe sshfs: http://www.linuxjournal.com/article/8904

adamf663 · 02-10-2021, 08:49 AM

Quote:

Originally Posted by jschiwal

NFS isn't secure over the internet. Because it uses multiple ports and both tcp and udp, it doesn't fit inside an ssh tunnel. It would be better to use scp or sftp instead to download or upload files. There may be a way to force NFS4 to operate securely over the internet. That would take a lot of research and work. Scp is a lot easier.

There is also webDAV.

There are times when there is nat translation without the other side being the internet. For example a VM using a nat virtual network.

schneidz · 02-22-2021, 08:17 PM

wow, a 12 year old bump.