seeing nfs shares problem (firewall)
 

have set up nfs shares on a pc. I can see them when the firewall (guarddog) is disabled, but not when it is enabled.

have typed rpcinfo -p and got the stuff below, which i added and unblocked the ports below. but still no joy - I think i've missed a few ports - can anyone tell me the next stage.

cheers,

ross


program vers proto port
100000 2 tcp 111 portmapper
100000 2 udp 111 portmapper
100024 1 udp 916 status
100024 1 tcp 919 status
391002 2 tcp 1024 sgi_fam
100003 2 udp 2049 nfs
100003 3 udp 2049 nfs
100003 2 tcp 2049 nfs
100003 3 tcp 2049 nfs
100021 1 udp 1024 nlockmgr
100021 3 udp 1024 nlockmgr
100021 4 udp 1024 nlockmgr
100021 1 tcp 1025 nlockmgr
100021 3 tcp 1025 nlockmgr
100021 4 tcp 1025 nlockmgr
100005 1 udp 674 mountd
100005 1 tcp 677 mountd
100005 2 udp 674 mountd
100005 2 tcp 677 mountd
100005 3 udp 674 mountd
100005 3 tcp 677 mountd

wow
 

gee, I don't know.

I just ticked the box under Network file system - Sun Microsystems under File Transfer and had it working. Maybe you can do the same?

nope that was ticked. but something is blocking it - i can't even see nfs shares on my own box (which i can with the firewall disabled).

any ideas??

If you disable your firewall, connect to the nfs share, then run "netstat -atu" it will tell you what connections are being made to your box. (see below). So you'll be able to see what ports/protocols your firewall wants to let through if you have missed any.

user@linux-box]$ netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:32768 *:* LISTEN
tcp 0 0 localhost.local:32769 *:* LISTEN
tcp 0 0 *:sunrpc *:* LISTEN
tcp 0 0 *:x11 *:* LISTEN
tcp 0 0 *:http *:* LISTEN
tcp 0 0 *:ssh *:* LISTEN
tcp 0 0 *:https *:* LISTEN
tcp 0 0 xxx.xxx.xxx.xxx:36126 xxx.xxx.xxx.xxx:ssh ESTABLISHED
tcp 0 0 xxx.xxx.xxx.xxx:37214 xxx.xxx.xxx.xxx:ssh ESTABLISHED
udp 0 0 *:32768 *:*
udp 0 0 *:bootpc *:*
udp 0 0 *:845 *:*
udp 0 0 *:sunrpc *:*

another possibility is your firewall is blocking incoming connections. (turn the firewall level to medium on red hat)

hope this helps