NFS problem
Gerhard Magnus
magnus at agora.rdrop.com
Mon Mar 24 18:46:42 UTC 2008
On Mon, 2008-03-24 at 06:15 +0000, Nicholas Robinson wrote:
> On Monday 24 March 2008 00:43:44 Gerhard Magnus wrote:
> > I'm trying to set up an NFS file server on one of the boxes on my LAN
> > and have gotten stuck. On the server, I used system-config-nfs to create
> > the following /etc/exports file:
> >
> > /home/magnusg/music 192.168.1.11(rw,sync) 192.168.1.12(rw,sync)
> > 192.168.1.13(rw,sync)
> >
> > to allow the other three boxes r/w access to the
> > directory /home/magnusg/music on the server (192.168.1.14).
> >
> > Also on the server, I used system-config-services to start nfs and
> > nfslock on run levels 3 and 5. Then I checked NFS4 on the firewall
> > configuration widget system-config-firewall to open tcp and udp ports
> > 2049. Then I rebooted the server.
> >
> > On one of the clients I then did (as root):
> >
> > mkdir /mnt/PuteF
> > mount 192.168.1.14:/home/magnusg/music /mnt/PuteF
> >
> > and got the error message:
> > mount: mount to NFS server '192.168.1.14' failed: System Error: No route
> > to host
> >
> > I'm guessing I need to open more ports, but which ones and where? The
> > four boxes are connected to a Linksys router.
> >
> > Thanks for the help! --Jerry
>
> Hi
>
> Try turning your firewall off completely for a while - "service iptables stop"
> or "service ip6tables stop" will do it from the shell.
>
> I don't bother with firewalls on my internal network machines, but then my
> kids are only young!
>
> If turning it off makes nfs work then turn it back on using service iptables
> start and send the output from service iptables status to the list.
>
> N
After executing "service iptables stop" on both server and client I was
able to mount the shared directory. After running "service iptables
start" on both boxes I am still able to access files in the shared
directory from the client.
Here's the output of service iptables status on the server (with the
firewalls back up):
root at PuteF Mon Mar 24 11:30:51
[129] /home/magnusg $ service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 RH-Firewall-1-INPUT all -- 0.0.0.0/0
0.0.0.0/0
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 REJECT all -- 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
Chain RH-Firewall-1-INPUT (1 references)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp
type 255
3 ACCEPT esp -- 0.0.0.0/0 0.0.0.0/0
4 ACCEPT ah -- 0.0.0.0/0 0.0.0.0/0
5 ACCEPT udp -- 0.0.0.0/0 224.0.0.251 udp
dpt:5353
6 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:631
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:631
8 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state
RELATED,ESTABLISHED
9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state
NEW tcp dpt:2049
10 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 state
NEW udp dpt:2049
11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state
NEW tcp dpt:22
12 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 state
NEW udp dpt:111
13 REJECT all -- 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-prohibited
...and on the client:
root at PuteB Mon Mar 24 11:42:33
[240] /mnt/PuteF/mp3/songs $ service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 RH-Firewall-1-INPUT all -- 0.0.0.0/0
0.0.0.0/0
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 REJECT all -- 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
Chain RH-Firewall-1-INPUT (1 references)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp
type 255
3 ACCEPT esp -- 0.0.0.0/0 0.0.0.0/0
4 ACCEPT ah -- 0.0.0.0/0 0.0.0.0/0
5 ACCEPT udp -- 0.0.0.0/0 224.0.0.251 udp
dpt:5353
6 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:631
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:631
8 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state
RELATED,ESTABLISHED
9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state
NEW tcp dpt:22
10 REJECT all -- 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-prohibited
I really want to learn samba eventually but I thought I'd master
something simpler first :)
More information about the users
mailing list