NFS problem

Gerhard Magnus magnus at agora.rdrop.com
Mon Mar 24 18:46:42 UTC 2008


On Mon, 2008-03-24 at 06:15 +0000, Nicholas Robinson wrote:
> On Monday 24 March 2008 00:43:44 Gerhard Magnus wrote:
> > I'm trying to set up an NFS file server on one of the boxes on my LAN
> > and have gotten stuck. On the server, I used system-config-nfs to create
> > the following /etc/exports file:
> >
> > /home/magnusg/music  192.168.1.11(rw,sync) 192.168.1.12(rw,sync)
> > 192.168.1.13(rw,sync)
> >
> > to allow the other three boxes r/w access to the
> > directory /home/magnusg/music on the server (192.168.1.14).
> >
> > Also on the server, I used system-config-services to start nfs and
> > nfslock on run levels 3 and 5. Then I checked NFS4 on the firewall
> > configuration widget system-config-firewall to open tcp and udp ports
> > 2049. Then I rebooted the server.
> >
> > On one of the clients I then did (as root):
> >
> > mkdir /mnt/PuteF
> > mount 192.168.1.14:/home/magnusg/music /mnt/PuteF
> >
> > and got the error message:
> > mount: mount to NFS server '192.168.1.14' failed: System Error: No route
> > to host
> >
> > I'm guessing I need to open more ports, but which ones and where? The
> > four boxes are connected to a Linksys router.
> >
> > Thanks for the help! --Jerry
> 
> Hi
> 
> Try turning your firewall off completely for a while - "service iptables stop" 
> or "service ip6tables stop" will do it from the shell.
> 
> I don't bother with firewalls on my internal network machines, but then my 
> kids are only young!
> 
> If turning it off makes nfs work then turn it back on using service iptables 
> start and send the output from service iptables status to the list.
> 
> N

After executing "service iptables stop" on both server and client I was
able to mount the shared directory. After running "service iptables
start" on both boxes I am still able to access files in the shared
directory from the client.

Here's the output of service iptables status on the server (with the
firewalls back up):

root at PuteF Mon Mar 24 11:30:51
[129] /home/magnusg $ service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0
0.0.0.0/0           

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination         
1    REJECT     all  --  0.0.0.0/0            0.0.0.0/0
reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (1 references)
num  target     prot opt source               destination         
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           
2    ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp
type 255 
3    ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0           
4    ACCEPT     ah   --  0.0.0.0/0            0.0.0.0/0           
5    ACCEPT     udp  --  0.0.0.0/0            224.0.0.251         udp
dpt:5353 
6    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp
dpt:631 
7    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp
dpt:631 
8    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state
RELATED,ESTABLISHED 
9    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state
NEW tcp dpt:2049 
10   ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           state
NEW udp dpt:2049 
11   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state
NEW tcp dpt:22 
12   ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           state
NEW udp dpt:111 
13   REJECT     all  --  0.0.0.0/0            0.0.0.0/0
reject-with icmp-host-prohibited 

...and on the client:

root at PuteB Mon Mar 24 11:42:33
[240] /mnt/PuteF/mp3/songs $ service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0
0.0.0.0/0           

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination         
1    REJECT     all  --  0.0.0.0/0            0.0.0.0/0
reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (1 references)
num  target     prot opt source               destination         
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           
2    ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp
type 255 
3    ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0           
4    ACCEPT     ah   --  0.0.0.0/0            0.0.0.0/0           
5    ACCEPT     udp  --  0.0.0.0/0            224.0.0.251         udp
dpt:5353 
6    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp
dpt:631 
7    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp
dpt:631 
8    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state
RELATED,ESTABLISHED 
9    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state
NEW tcp dpt:22 
10   REJECT     all  --  0.0.0.0/0            0.0.0.0/0
reject-with icmp-host-prohibited 

I really want to learn samba eventually but I thought I'd master
something simpler first :) 




More information about the users mailing list