LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-21-2008, 01:40 PM   #1
author_unknown
Member
 
Registered: Aug 2007
Location: Buffalo, NY
Distribution: Fedora 7, RHEL5, CentOS 5 and Backtrack 2.0
Posts: 73

Rep: Reputation: 15
iptables is blocking nfs


Hi guys.... i m stuck at a point in which i want to mount a nfs using tcp based connection... i have configured firewall to allow portmapper(tcp 111), nfs (tcp 2049) mountd(tcp 791) and is on a machine running rhel 5 .. however wen i try to mount this directory (the name is tempnfs) the mounting fails from another boxs running open suse 11 and cent OS4 using the command

mount -t nfs -o tcp 192.168.1.3:/tempnfs /mnt/tempdir
the mounting fails and the message "internal error" is displayed... the exit status using echo $? is 32.....

but if i flush the iptables firewall the mounting is successful with 0 exit status.... what should i do...???

The nfs server runs rhel 5 and has ip 192.168.1.3
the client with opensuse installed has ip 192.168.1.2
the client with centos installed on it has ip 192.168.1.4



Thanks in advance
 
Old 09-21-2008, 03:05 PM   #2
rjlee
Senior Member
 
Registered: Jul 2004
Distribution: Ubuntu 7.04
Posts: 1,994

Rep: Reputation: 76
First make sure that NFS is actually running on port 2049; the default is to grab a high-numbered port I think (this may depend on your distro'). Also, make sure that it's using TCP, as it's possible that you've only opened the TCP port on the firewall, and if configured to use UDP the packets may block.

I found this quite informative: http://lists.freebsd.org/pipermail/f...ne/049995.html
 
Old 09-21-2008, 08:27 PM   #3
mlp68
Member
 
Registered: Jun 2002
Location: NY
Distribution: Gentoo,RH
Posts: 333

Rep: Reputation: 40
I use a generic way to figure out those blocks, when just looking at the rules (especially if they are somewhat complex) doesn't show anything obvious.

I posted this a long time ago
http://www.linuxquestions.org/questi...54#post3105554
If you set this up, you can actually see which packets get dropped.

See if that helps you. (My bet: It's not port 2049 -- the portmapper assigns a random free port. It often assigns the first free one in the range, but there are no guarantees.)

Good luck,
mlp
 
Old 09-21-2008, 10:04 PM   #4
author_unknown
Member
 
Registered: Aug 2007
Location: Buffalo, NY
Distribution: Fedora 7, RHEL5, CentOS 5 and Backtrack 2.0
Posts: 73

Original Poster
Rep: Reputation: 15
its definitely port 2049 because when redhat included the column of NFS4 in system-config-securitylevel-tui..... they made sure dat nfs bind itself on port 2049 tcp and udp... moreover the rpcinfo -p command also agrres dat nfs is running on port 2049 in both tcp and udp modes
 
Old 09-22-2008, 09:52 AM   #5
r3sistance
Senior Member
 
Registered: Mar 2004
Location: UK
Distribution: CentOS 6/7
Posts: 1,375

Rep: Reputation: 217Reputation: 217Reputation: 217
Might sound crazy to ask but have you opened 2049 to UDP then? You have only said it's been opened to TCP what I believe should work, but I usually test things like these just in case.
 
Old 09-22-2008, 11:28 AM   #6
author_unknown
Member
 
Registered: Aug 2007
Location: Buffalo, NY
Distribution: Fedora 7, RHEL5, CentOS 5 and Backtrack 2.0
Posts: 73

Original Poster
Rep: Reputation: 15
didnt do that sir..... bt do these things work?????
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Firewall blocking NFS even though ports are open OmnipotentOscar Linux - Security 13 01-25-2010 12:47 PM
Firewall blocking the NFS server. ZAMO Linux - Security 3 12-17-2007 09:09 AM
Allowing NFS in IPTABLES: Fix port for NFS Lock Manager Swakoo Linux - General 10 08-25-2006 05:24 AM
Blocking an IP with iptables asif2k Linux - Security 4 04-18-2006 11:22 PM
iptables blocking NFS mount karwoski Linux - Networking 0 11-19-2003 01:34 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:57 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration