Re: NFS connection dropped
"K. Elo" <[email protected]>
| Newsgroups | gmane.network.guarddog |
|---|---|
| Message-ID | <[email protected]> |
Hi again, I come back to "my" old thread, because the nfs is still not working correctly. Dr. Michael J. Chudobiak wrote on September 1, 2005, 22:45: > > Port 1025 is the problem in the above log. Its being blocked, not > 111. However, the ports used by NFS are usually NOT static. It might > be 1025 today, 9999 tomorrow. You have to "pin" the NFS ports, and > open the firewall for them. To do this: > > > 1. Create the file "/etc/sysconfig/nfs" and add the following > contents: > > STATD_PORT=4001 > LOCKD_TCPPORT=4002 > LOCKD_UDPPORT=4002 > MOUNTD_PORT=4003 > > > 2. Append the following to the file "/etc/services": > > rquotad 4004/tcp # rpc.rquotad tcp port > rquotad 4004/udp # rpc.rquotad udp port > > > 3. Restart the nfs services: > > /etc/init.d/nfs restart > /etc/init.d/nfslock restart > > > 4. Run /usr/sbin/rpcinfo -p and make sure the ports above have > changed. > > > 5. Add a custom protocol in the advanced tab of guarddog for ports > 4001-4004, for both udp and tcp. Enable these protocols. In the end, > these ports should be open: > > 111:tcp, 111:udp, 2049:tcp, 2049:udp, 4001:tcp, 4001:udp, 4002:tcp, > 4002:udp, 4003:tcp, 4003:udp, 4004:tcp, 4004:udp > > I have done this and the data _transfer_ works just fine. But, the problem is the mounting. Each time I try to mount the shared directory from the laptop (=client) by entering "mount 192.168.1.1:/<dir> /mnt" the client tries ... and tries ... and tries ... until I hit ctrl+c. The _server_ side just drops the attemps and, thus, refuses the connection between the two machines (nfs etc. _are_ enabled). But, if I disable the server's firewall for a while I can - of course - mount the shared dir. And, once mounted, I can enable the server's firewall and transfer the data. I haven't had much time for finding a solution for this problem, so I have used a USB-stick to transfer the date between my desktop and laptop. But I still would prefer a workaround solution for this problem, because some updates once downloaded on the server are far too big to fit on a USB stick... Kind regards, Kimmo ------------------------------------------------------- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today * Register for a JBoss Training Course Free Certification Exam for All Training Attendees Through End of 2005 Visit http://www.jboss.com/services/certification for more information