[SOLVED] nfs mount timeout

mfoley · 09-30-2016, 01:59 PM

I'm having trouble mounting a remote nfs mountpoint. The mountpoint is exported:

>showmount -e localhost
Export list for localhost:
/tmp/trash 24.96.yyy.xxx

and on the client host at 24.96.yyy.xxx I can telnet to ports 111 and 2049, so the firewall is open. The client fstab has:

lincoln:/tmp/trash /tmp/trash nfs rw 0 0

When I try to mount:

Code:

1 14:52:21 root@server:~
> mount /tmp/trash
mount.nfs: Connection timed out
1 14:54:33 root@server:~

As you can see, this timeout takes about 70 seconds.

Any idea?

MadeInGermany · 10-01-2016, 04:15 PM

Can you do

Code:

getent hosts lincoln

Code:

rpcinfo -p lincoln

Code:

showmount -e lincoln

on the client?

mfoley · 10-01-2016, 06:04 PM

Quote:

Originally Posted by MadeInGermany

Can you do

Code:

getent hosts lincoln

Code:

root@server:~$ getent hosts lincoln
184.57.xxx.yyy  lincoln hpmini watcher

Quote:

Code:

rpcinfo -p lincoln

Code:

root@server:~$ rpcinfo -p lincoln
   program vers proto   port
    100000    2   tcp    111  portmapper
    100024    1   udp  43205  status
    100024    1   tcp  39881  status
    100011    1   udp    914  rquotad
    100011    2   udp    914  rquotad
    100011    1   tcp    917  rquotad
    100011    2   tcp    917  rquotad
    100003    2   tcp   2049  nfs
    100003    3   tcp   2049  nfs
    100003    4   tcp   2049  nfs
    100003    2   udp   2049  nfs
    100003    3   udp   2049  nfs
    100003    4   udp   2049  nfs
    100021    1   udp  49123  nlockmgr
    100021    3   udp  49123  nlockmgr
    100021    4   udp  49123  nlockmgr
    100021    1   tcp  35721  nlockmgr
    100021    3   tcp  35721  nlockmgr
    100021    4   tcp  35721  nlockmgr
    100005    1   udp  58377  mountd
    100005    1   tcp  60045  mountd
    100005    2   udp  58377  mountd
    100005    2   tcp  60045  mountd
    100005    3   udp  58377  mountd
    100005    3   tcp  60045  mountd

That looks promising.

Quote:

Code:

showmount -e lincoln

on the client?

Code:

1 18:59:05 root@server:~
> showmount -e lincoln
rpc mount export: RPC: Timed out
1 19:02:49 root@server:~

MadeInGermany · 10-02-2016, 01:28 AM

Something is blocking ports 58377/udp and 60045/tcp.
If you have a firewall, then consider allowing every port from 32768 to 65535.
This is because the RPC prog 100005 can map to this port range.
Also the other RPC progs reported by the rpcinfo are part of the NFS protocol, and should be allowed.

mfoley · 10-02-2016, 11:26 AM

I tried connecting a host on the same LAN, and it mounted just fine. So, I then tried connecting from that same host to the public IP of the NFS server, no go. The NFS server (lincoln) is behind a firewall/router. I have to conclude that, if I can mount the nfs directory inside from behind, the firewall, but not outside the firewall, then the firewall must be the problem. But, I don't know what. ports 111 and 2049 are both open on the firewall and forwarded to the NFS server. I'll try opening that range, if I can, and post back.

LATER ...

Yup! That did it! Thanks!!