Re: NFS connection dropped

"K. Elo" <[email protected]>
Newsgroups gmane.network.guarddog
Message-ID <[email protected]>
Hi again,

I come back to "my" old thread, because the nfs is still not working 
correctly.

Dr. Michael J. Chudobiak wrote on September 1, 2005, 22:45:
>
> Port 1025 is the problem in the above log. Its being blocked, not
> 111. However, the ports used by NFS are usually NOT static. It might
> be 1025 today, 9999 tomorrow. You have to "pin" the NFS ports, and
> open the firewall for them. To do this:
>
>
> 1. Create the file "/etc/sysconfig/nfs" and add the following
> contents:
>
> STATD_PORT=4001
> LOCKD_TCPPORT=4002
> LOCKD_UDPPORT=4002
> MOUNTD_PORT=4003
>
>
> 2. Append the following to the file "/etc/services":
>
> rquotad 4004/tcp # rpc.rquotad tcp port
> rquotad 4004/udp # rpc.rquotad udp port
>
>
> 3. Restart the nfs services:
>
> /etc/init.d/nfs restart
> /etc/init.d/nfslock restart
>
>
> 4. Run /usr/sbin/rpcinfo -p and make sure the ports above have
> changed.
>
>
> 5. Add a custom protocol in the advanced tab of guarddog for ports
> 4001-4004, for both udp and tcp. Enable these protocols. In the end,
> these ports should be open:
>
> 111:tcp, 111:udp, 2049:tcp, 2049:udp, 4001:tcp, 4001:udp, 4002:tcp,
> 4002:udp, 4003:tcp, 4003:udp, 4004:tcp, 4004:udp
>
>
I have done this and the data _transfer_ works just fine. But, the 
problem is the mounting. Each time I try to mount the shared directory 
from the laptop (=client) by entering "mount 192.168.1.1:/<dir> /mnt" 
the client tries ... and tries ... and tries ... until I hit ctrl+c. 
The _server_ side just drops the attemps and, thus, refuses the 
connection between the two machines (nfs etc. _are_ enabled).

But, if I disable the server's firewall for a while I can - of course - 
mount the shared dir. And, once mounted, I can enable the server's 
firewall and transfer the data.

I haven't had much time for finding a solution for this problem, so I 
have used a USB-stick to transfer the date between my desktop and 
laptop. But I still would prefer a workaround solution for this 
problem, because some updates once downloaded on the server are far too 
big to fit on a USB stick... 

Kind regards,
Kimmo



-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.