Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
|
|
12-04-2008, 06:21 PM
|
#16
|
Member
Registered: Nov 2007
Location: Pakistan
Distribution: Redhat and Debian
Posts: 317
Rep:
|
ok then change 192.168.1.1 to 192.168.1.5 in /etc/exports and restart nfs
|
|
|
12-04-2008, 06:55 PM
|
#17
|
Member
Registered: Nov 2008
Location: Copenhagen, Denmark
Distribution: Ubuntu and Xubuntu 8.10
Posts: 98
Original Poster
Rep:
|
When I try to connect via IP, Ubuntu says "internal error".
|
|
|
12-05-2008, 12:07 AM
|
#18
|
Member
Registered: Nov 2007
Location: Pakistan
Distribution: Redhat and Debian
Posts: 317
Rep:
|
see what /var/log/messages has to say ?
|
|
|
12-05-2008, 07:32 AM
|
#19
|
Member
Registered: Nov 2008
Location: Copenhagen, Denmark
Distribution: Ubuntu and Xubuntu 8.10
Posts: 98
Original Poster
Rep:
|
The log says nohing about NFS. :S
|
|
|
12-05-2008, 08:21 AM
|
#20
|
Member
Registered: Nov 2008
Location: Copenhagen, Denmark
Distribution: Ubuntu and Xubuntu 8.10
Posts: 98
Original Poster
Rep:
|
I have a idea.
If you tell me what information I need to come up with, so please tell me exactly what I need to do to get it to work.
It is a little easier now that I'm not so good for Linux yet.
|
|
|
12-05-2008, 08:33 AM
|
#21
|
Member
Registered: Nov 2007
Location: Pakistan
Distribution: Redhat and Debian
Posts: 317
Rep:
|
ok, so far you have setup an ip which is 192.168.1.5 binded to your server, you have got nfs server running on it, what we need to do right now is to check whether we have setup nfs correctly or not to check that try the following on your server,
mount -t nfs 192.168.1.5:/home/nicolas/Musiknumre /nfstesting
where /nfstesting is your mount point, also make sure portmap rpc services are running.
|
|
|
12-05-2008, 10:38 AM
|
#22
|
Member
Registered: Nov 2008
Location: Copenhagen, Denmark
Distribution: Ubuntu and Xubuntu 8.10
Posts: 98
Original Poster
Rep:
|
Now my Export-file look like this:
# /etc/exports: the access control list for filesystems which may be exported
# to NFS clients. See exports(5).
#
# Example for NFSv2 and NFSv3:
# /srv/homes nicolas-desktop(rw,sync) nicolas-laptop(rw,sync)
#
# Example for NFSv4:
# /srv/nfs4 gss/krb5i(rw,sync,fsid=0,crossmnt)
# /srv/nfs4/homes gss/krb5i(rw,sync)
#
/home/nicolas/Musiknumre 192.168.1.5 (rw,sync)
________________________
When i try "Sudo mount -t nfs 192.168.1.5:/home/nicolas/Musiknumre /nfstesting", it works!
What did it work?
|
|
|
12-05-2008, 10:41 AM
|
#23
|
Member
Registered: Nov 2008
Location: Copenhagen, Denmark
Distribution: Ubuntu and Xubuntu 8.10
Posts: 98
Original Poster
Rep:
|
And how do I unmount the harddrive again?
|
|
|
12-05-2008, 11:00 AM
|
#24
|
Member
Registered: Nov 2008
Location: Copenhagen, Denmark
Distribution: Ubuntu and Xubuntu 8.10
Posts: 98
Original Poster
Rep:
|
I find out how i unmount.
|
|
|
12-05-2008, 11:05 AM
|
#25
|
Member
Registered: Nov 2008
Location: Copenhagen, Denmark
Distribution: Ubuntu and Xubuntu 8.10
Posts: 98
Original Poster
Rep:
|
Now I just missing something knowledge of /etc/hosts.allow and /etc/hosts.deny. a website says that without making use of them, NFS is not safe.
What needs to be in them?
|
|
|
12-06-2008, 04:48 AM
|
#26
|
Member
Registered: Nov 2007
Location: Pakistan
Distribution: Redhat and Debian
Posts: 317
Rep:
|
i have no idea about how to prevent or allow them from mounting using tcpwrappers.
|
|
|
12-06-2008, 06:42 AM
|
#27
|
Member
Registered: Nov 2008
Location: Copenhagen, Denmark
Distribution: Ubuntu and Xubuntu 8.10
Posts: 98
Original Poster
Rep:
|
Ok. But thank you very much for you big help!
|
|
|
12-06-2008, 07:08 AM
|
#28
|
LQ Guru
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733
|
There are different ways your nfs server could be running. An xinetd service, as a normal service or using the nfs kernel support. If it is an xinetd service you can either use /etc/hosts.allow, /etc/hosts.deny or use /etc/xinetd.d/nfs to configure access.
If /etc/xinetd.d/nfs exists, you can add an "only_from" entry. This entry could be like "10.1.1.10,12,15" to allow only 10.1.1.10, 10.1.1.12 and 10.1.1.15 access. If you have a small number of client hosts, you could use iptables rules that allow access from just certain hosts and by default drop nfs requests from other hosts. The requests will be either dropped or denied in this case.
To prevent IP spoofing by other hosts on the LAN, you could add MAC address entries to arp.
sudo /sbin/arp -s <ip address> <mac address>
Of course, a user could manually change the MAC and IP address on their host. To totally prevent that, you need to use authentication. If your switch is configurable, then you may be able to configure it to only allow traffic on that port from a particular MAC address. This could provide general arp spoofing protection for your network.
|
|
|
All times are GMT -5. The time now is 07:41 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|