# [OmniOS-discuss] Heads up: Redhat/CentOS NFSv3 clients file locking failures

Schweiss, Chip chip at innovates.com
Wed Jan 22 20:47:38 UTC 2014

- Previous message: [OmniOS-discuss] Changing the mtu of a vlan interface
- Next message: [OmniOS-discuss] [zfs] Heads up: Redhat/CentOS NFSv3 clients file locking failures
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    A recent change in the NLM for NFSv3 has exposed a problem with the
    firewall on Redhat/CentOS.

    Connections back to the client are blocked by the firewall because the
    connection tracking module is not catching connections as part of the open
    NFS connections to the server.

    I have attempted to resolve this by opening NFS specific ports but the
    server kept connecting to ports that I haven't seen referenced before
    including privileged ports.

    As a work around I have implemented accept rules for all TCP from the NFS
    server.

    This could be across all Linux distributions.  My tests have only been on
    CentOS.

    The problem first appears when port 111 is blocked, opening 111 basically
    opens a can worms to what seems randomly selected ports of any value.   I
    know on Linux NFS servers the connection ports can be limited.   Is this
    possible on Illumos?

    -Chip
    -------------- next part --------------
    An HTML attachment was scrubbed...
    URL: <http://lists.omniti.com/pipermail/omnios-discuss/attachments/20140122/2016da99/attachment-0001.html>

- Previous message: [OmniOS-discuss] Changing the mtu of a vlan interface
- Next message: [OmniOS-discuss] [zfs] Heads up: Redhat/CentOS NFSv3 clients file locking failures
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the OmniOS-discuss mailing list