You are not logged in.

#1 2008-12-21 23:55:48

brazzmonkey
Member
From: between keyboard and chair
Registered: 2006-03-16
Posts: 818

NFS and firewall

hi there,
i'm trying to set up an NFS share. Which ports should I open in shorewall ??
so far i've opened TCP/UDP 111, TCP/UDP 2049, TCP 37587, UDP 34709.
do i need to open any other ports ?

thanks


what goes up must come down

Offline

#2 2008-12-22 01:25:37

fukawi2
Ex-Administratorino
From: .vic.au
Registered: 2007-09-28
Posts: 6,224
Website

Re: NFS and firewall

NFS is the biggest PITA when it comes to firewalls. Without me repeating info, this page may help you:
http://www.lowth.com/LinWiz/nfs_help.html

...some of the TCP/IP and UDP ports used by components of the service are randomly generated as part of the "SunRPC" mechanism.

Offline

#3 2008-12-22 02:17:32

Xyne
Administrator/PM
Registered: 2008-08-03
Posts: 6,963
Website

Re: NFS and firewall

Maybe you should look into using openssh or openvpn to tunnel a connection through your firewall.


My Arch Linux StuffForum EtiquetteCommunity Ethos - Arch is not for everyone

Offline

#4 2008-12-22 10:14:22

brazzmonkey
Member
From: between keyboard and chair
Registered: 2006-03-16
Posts: 818

Re: NFS and firewall

well, maybe i should think about using ftp instead...


what goes up must come down

Offline

#5 2008-12-22 11:35:28

fk
Member
From: Germany
Registered: 2006-04-29
Posts: 524

Re: NFS and firewall

brazzmonkey wrote:

well, maybe i should think about using ftp instead...

try sftp, simple as ftp and secure like ssh

Last edited by fk (2008-12-22 22:29:02)


Have you tried to turn it off and on again?

Offline

#6 2008-12-22 22:04:11

brazzmonkey
Member
From: between keyboard and chair
Registered: 2006-03-16
Posts: 818

Re: NFS and firewall

i'll check this out.
Thank you guys.


what goes up must come down

Offline

#7 2009-09-17 10:28:07

print
Member
Registered: 2007-02-27
Posts: 174

Re: NFS and firewall

These rules on the server running shorewall and NFS make it work on my LAN:

ACCEPT              net:192.168.1.0/24       $FW     tcp     111,2049,40160
ACCEPT              net:192.168.1.0/24       $FW     udp     111,2049,40160

% whereis whatis whence which whoami whois who

Offline

#8 2009-09-17 11:32:41

fukawi2
Ex-Administratorino
From: .vic.au
Registered: 2007-09-28
Posts: 6,224
Website

Offline

#9 2009-09-17 11:50:07

brazzmonkey
Member
From: between keyboard and chair
Registered: 2006-03-16
Posts: 818

Re: NFS and firewall

Indeed, this is an old thread, I don't even bother using NFS because I figured out FTP was much, much faster.
Thanks anyhow print, hopefully that'll help someone.


what goes up must come down

Offline

Board footer

Powered by FluxBB