NFS mount problem: Connection refused

kenneho · 10-16-2008, 04:28 AM

Hi.

I'm running Linux, and are trying to mount a Unix (HP-UX) NFS share.

"showmount -e unixserver" shows the available shares, and I'm able to telnet to port 2049 on the Unix server. But getting the mount to work result in a "connection refused" message. The command I'm using is "mount -t nfs unixserver:/share /unixshare".

I'm puzzled by why this doesn't work, since both showmount and telnet works fine.

Anyone knows what may be causing this?

Regards,
kenneho

David1357 · 10-16-2008, 08:04 AM

Quote:

Originally Posted by kenneho

I'm puzzled by why this doesn't work, since both showmount and telnet works fine.

1. Have you looked in "/var/log/messages" on the Linux machine?

2. Have you looked in the equivalent file on the HP-UX machine?

3. Have you verified that the Linux firewall is not blocking the NFS ports?

4. Have you verified that any firewall that might be running on the HP-UX machine is not blocking the NFS ports?

jschiwal · 10-16-2008, 08:10 AM

Don't you also need port 111 open?

Could you post the /etc/exports entry for this directory?
I've had better luck using a form like '192.168.1.0/255.255.255.0' instead of just '192.168.1.'

Look at the logs for both the server and client computers.

kenneho · 10-16-2008, 08:21 AM

Quote:

Originally Posted by David1357

3. Have you verified that the Linux firewall is not blocking the NFS ports?

We think we found the problem, but don't know exactly how to solve it. Seems there was an firewall issue: Between the two serveres there is a firewall. We've made sure that TPC port 2049 is open, but seems like this wasn't good enough.

It look like the ports used varies a lot, so do you know how to correctly set up firewall to allow for NFS traffic?

TB0ne · 10-16-2008, 08:51 AM

Quote:

Originally Posted by kenneho

We think we found the problem, but don't know exactly how to solve it. Seems there was an firewall issue: Between the two serveres there is a firewall. We've made sure that TPC port 2049 is open, but seems like this wasn't good enough.

It look like the ports used varies a lot, so do you know how to correctly set up firewall to allow for NFS traffic?

Very broad question, since you don't say what kind of firewall(s) are in place, running what software. Do you mean a hardware firewall? Software on Linux or on HPUX?

kenneho · 10-16-2008, 09:06 AM

Quote:

Originally Posted by TB0ne

Very broad question, since you don't say what kind of firewall(s) are in place, running what software. Do you mean a hardware firewall? Software on Linux or on HPUX?

I'm not sure actually, as we have dedicated network security guys, and I'm merely a linux guy.

But I'm not looking for details on how to configure it (I'm sure the network guys can handle that themselves), but I'd like some input on which ports NFS speak and such.

David1357 · 10-16-2008, 09:10 AM

Quote:

Originally Posted by kenneho

It look like the ports used varies a lot, so do you know how to correctly set up firewall to allow for NFS traffic?

This NFS Security HOWTO claims to have a set of iptables rules that will solve the problem.

kenneho · 10-16-2008, 10:42 AM

Quote:

Originally Posted by David1357

This NFS Security HOWTO claims to have a set of iptables rules that will solve the problem.

Thanks I'll give it a read.