• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 138
  • Last Modified:

Redhat 6 can not get correct firewall for nfs

I am in a lab environment and am trying to get my nfs to work.

without the firewall showmount -e works just find.

I have permitted nfs, and rpc through however nfs still does not want to work with the firewall up.

the /etc/sysconfig/nfs file use to have a may ports configured in the same range of 400x however if I look at that file on this redhat 6 system the ports are different in the file.

There seems like there should be some sort of easy way to securely let nfs in
0
TIMFOX123
Asked:
TIMFOX123
1 Solution
 
Seth SimmonsSr. Systems AdministratorCommented:
what firewall are you using?
0
 
TIMFOX123Author Commented:
netfilter - iptables , the one that is stock on centos

this is the local firewall that just protects that one system.
0
 
gheistCommented:
nfs server needs multiple ports open - nfsd, mountd and rpc portmapper (last is 111 tcp/udp, former are dynamic, but more or less visible in rpcinfo -p)
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
MazdajaiCommented:
Try using the firewall terminal user- interface aka
system-config-firewall-tui

Open in new window

and select all NFS to begin with, then lock down to fits your needs:

NFSv2 and NFSv3
TCP
111, 662, 892, 2049, 32803

UDP
111, 662, 892, 2049, 32769

NFSv4
TCP
2049
0
 
gheistCommented:
662 - macosx sharing
892 - unassigned

my RHEL6 has 111 and 2049 + 2 high ports open
you can fix them in /etc/sysconfig/nfs
0
 
TIMFOX123Author Commented:
gheist:

does showmount -e from a remote system work for you ?
0
 
gheistCommented:
It should not.
0
 
TIMFOX123Author Commented:
great job and sorry for not getting back
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now