ACL/Firewall [NFS], which Ports?

fbeye · 24. Dezember 2023

Hey peoples

I created some vlans and broke up my Network, 192.168.1.0, 192.168.2.0 so on so forth.. But now I am needing to open up the ports to allow devices on various networks to MOUNT the NFS... I am seeing several answers to what ports needed to be allowed, but was not sure. It is being hosted on OMV, So..

BernH · 25. Dezember 2023

Which ports do I need to open in the firewall to use NFS?

I'm running Ubuntu 11.10 - setting up NFS to share a directory among many other servers. Which ports are required to be opened on the firewall?

serverfault.com

fbeye · 25. Dezember 2023

Well, after opening these Ports, I can not mount my NFS (192.168.6.177) on my OMV (192.168.2.181).

Code

Failed to execute command 'export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin; export LANG=C.UTF-8; export LANGUAGE=; omv-salt deploy run --no-color remotemount 2>&1' with exit code '1': debian:
----------
          ID: configure_remote_dir
    Function: file.directory
        Name: /srv/remotemount
      Result: True
     Comment: The directory /srv/remotemount is in the correct state
     Started: 14:04:33.253069
    Duration: 4.817 ms
     Changes:
----------
          ID: remove_remotemount_mount_files
    Function: module.run
      Result: True
     Comment: file.find: []
     Started: 14:04:33.258428
    Duration: 3.475 ms
     Changes:
              ----------
              file.find:
----------
          ID: remove_remotemount_automount_files
    Function: module.run
      Result: True
     Comment: file.find: []
     Started: 14:04:33.262002
    Duration: 3.162 ms
     Changes:
              ----------
              file.find:
----------
          ID: remove_remotemount_cifs_cred_files
    Function: module.run
      Result: True
     Comment: file.find: []
     Started: 14:04:33.265259
    Duration: 5.511 ms
     Changes:
              ----------
              file.find:
----------
          ID: remove_remotemount_s3fs_cred_files
    Function: module.run
      Result: True
     Comment: file.find: []
     Started: 14:04:33.270867
    Duration: 5.436 ms
     Changes:
              ----------
              file.find:
----------
          ID: remove_remotemount_davfs_cred_file
    Function: file.absent
        Name: /etc/davfs2/secrets
      Result: True
     Comment: Removed file /etc/davfs2/secrets
     Started: 14:04:33.276400
    Duration: 0.481 ms
     Changes:
              ----------
              removed:
                  /etc/davfs2/secrets
----------
          ID: configure_remotemount_davfs_cred_file
    Function: file.managed
        Name: /etc/davfs2/secrets
      Result: True
     Comment: File /etc/davfs2/secrets updated
     Started: 14:04:33.276969
    Duration: 1.79 ms
     Changes:
              ----------
              diff:
                  New file
----------
          ID: systemd_delete_dead_symlinks
    Function: cmd.run
        Name: find /etc/systemd/system/multi-user.target.wants -xtype l -print -delete
      Result: True
     Comment: Command "find /etc/systemd/system/multi-user.target.wants -xtype l -print -delete" run
     Started: 14:04:33.279273
    Duration: 5.204 ms
     Changes:
              ----------
              pid:
                  18648
              retcode:
                  0
              stderr:
              stdout:
----------
          ID: configure_remotemount_NAS
    Function: file.managed
        Name: /etc/systemd/system/srv-remotemount-NAS.mount
      Result: True
     Comment: File /etc/systemd/system/srv-remotemount-NAS.mount updated
     Started: 14:04:33.284668
    Duration: 101.325 ms
     Changes:
              ----------
              diff:
                  New file
              mode:
                  0644
----------
          ID: systemd-reload_NAS
    Function: cmd.run
        Name: systemctl daemon-reload
      Result: True
     Comment: Command "systemctl daemon-reload" run
     Started: 14:04:33.386090
    Duration: 252.802 ms
     Changes:
              ----------
              pid:
                  18650
              retcode:
                  0
              stderr:
              stdout:
----------
          ID: enable_NAS_remotemount
    Function: service.enabled
        Name: srv-remotemount-NAS.mount
      Result: True
     Comment: Service srv-remotemount-NAS.mount has been enabled, and is in the desired state
     Started: 14:04:34.601267
    Duration: 335.572 ms
     Changes:
              ----------
              srv-remotemount-NAS.mount:
                  True
----------
          ID: restart_NAS_remotemount
    Function: cmd.run
        Name: systemctl restart 'srv-remotemount-NAS.mount'
      Result: False
     Comment: Command "systemctl restart 'srv-remotemount-NAS.mount'" run
     Started: 14:04:34.937099
    Duration: 38.874 ms
     Changes:
              ----------
              pid:
                  18743
              retcode:
                  1
              stderr:
                  Job failed. See "journalctl -xe" for details.
              stdout:

Summary for debian
-------------
Succeeded: 11 (changed=11)
Failed:     1
-------------
Total states run:     12
Total run time:  758.449 ms
[ERROR   ] Command 'systemctl' failed with return code: 1
[ERROR   ] stderr: Job failed. See "journalctl -xe" for details.
[ERROR   ] retcode: 1
[ERROR   ] {'pid': 18743, 'retcode': 1, 'stdout': '', 'stderr': 'Job failed. See "journalctl -xe" for details.'}

Alles anzeigen

fbeye · 25. Dezember 2023

Code

OMV\ExecException: Failed to execute command 'export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin; export LANG=C.UTF-8; export LANGUAGE=; omv-salt deploy run --no-color remotemount 2>&1' with exit code '1': debian:
----------
          ID: configure_remote_dir
    Function: file.directory
        Name: /srv/remotemount
      Result: True
     Comment: The directory /srv/remotemount is in the correct state
     Started: 14:04:33.253069
    Duration: 4.817 ms
     Changes:
----------
          ID: remove_remotemount_mount_files
    Function: module.run
      Result: True
     Comment: file.find: []
     Started: 14:04:33.258428
    Duration: 3.475 ms
     Changes:
              ----------
              file.find:
----------
          ID: remove_remotemount_automount_files
    Function: module.run
      Result: True
     Comment: file.find: []
     Started: 14:04:33.262002
    Duration: 3.162 ms
     Changes:
              ----------
              file.find:
----------
          ID: remove_remotemount_cifs_cred_files
    Function: module.run
      Result: True
     Comment: file.find: []
     Started: 14:04:33.265259
    Duration: 5.511 ms
     Changes:
              ----------
              file.find:
----------
          ID: remove_remotemount_s3fs_cred_files
    Function: module.run
      Result: True
     Comment: file.find: []
     Started: 14:04:33.270867
    Duration: 5.436 ms
     Changes:
              ----------
              file.find:
----------
          ID: remove_remotemount_davfs_cred_file
    Function: file.absent
        Name: /etc/davfs2/secrets
      Result: True
     Comment: Removed file /etc/davfs2/secrets
     Started: 14:04:33.276400
    Duration: 0.481 ms
     Changes:
              ----------
              removed:
                  /etc/davfs2/secrets
----------
          ID: configure_remotemount_davfs_cred_file
    Function: file.managed
        Name: /etc/davfs2/secrets
      Result: True
     Comment: File /etc/davfs2/secrets updated
     Started: 14:04:33.276969
    Duration: 1.79 ms
     Changes:
              ----------
              diff:
                  New file
----------
          ID: systemd_delete_dead_symlinks
    Function: cmd.run
        Name: find /etc/systemd/system/multi-user.target.wants -xtype l -print -delete
      Result: True
     Comment: Command "find /etc/systemd/system/multi-user.target.wants -xtype l -print -delete" run
     Started: 14:04:33.279273
    Duration: 5.204 ms
     Changes:
              ----------
              pid:
                  18648
              retcode:
                  0
              stderr:
              stdout:
----------
          ID: configure_remotemount_NAS
    Function: file.managed
        Name: /etc/systemd/system/srv-remotemount-NAS.mount
      Result: True
     Comment: File /etc/systemd/system/srv-remotemount-NAS.mount updated
     Started: 14:04:33.284668
    Duration: 101.325 ms
     Changes:
              ----------
              diff:
                  New file
              mode:
                  0644
----------
          ID: systemd-reload_NAS
    Function: cmd.run
        Name: systemctl daemon-reload
      Result: True
     Comment: Command "systemctl daemon-reload" run
     Started: 14:04:33.386090
    Duration: 252.802 ms
     Changes:
              ----------
              pid:
                  18650
              retcode:
                  0
              stderr:
              stdout:
----------
          ID: enable_NAS_remotemount
    Function: service.enabled
        Name: srv-remotemount-NAS.mount
      Result: True
     Comment: Service srv-remotemount-NAS.mount has been enabled, and is in the desired state
     Started: 14:04:34.601267
    Duration: 335.572 ms
     Changes:
              ----------
              srv-remotemount-NAS.mount:
                  True
----------
          ID: restart_NAS_remotemount
    Function: cmd.run
        Name: systemctl restart 'srv-remotemount-NAS.mount'
      Result: False
     Comment: Command "systemctl restart 'srv-remotemount-NAS.mount'" run
     Started: 14:04:34.937099
    Duration: 38.874 ms
     Changes:
              ----------
              pid:
                  18743
              retcode:
                  1
              stderr:
                  Job failed. See "journalctl -xe" for details.
              stdout:

Summary for debian
-------------
Succeeded: 11 (changed=11)
Failed:     1
-------------
Total states run:     12
Total run time:  758.449 ms
[ERROR   ] Command 'systemctl' failed with return code: 1
[ERROR   ] stderr: Job failed. See "journalctl -xe" for details.
[ERROR   ] retcode: 1
[ERROR   ] {'pid': 18743, 'retcode': 1, 'stdout': '', 'stderr': 'Job failed. See "journalctl -xe" for details.'} in /usr/share/php/openmediavault/system/process.inc:242
Stack trace:
#0 /usr/share/php/openmediavault/engine/module/serviceabstract.inc(62): OMV\System\Process->execute()
#1 /usr/share/openmediavault/engined/rpc/config.inc(178): OMV\Engine\Module\ServiceAbstract->deploy()
#2 [internal function]: Engined\Rpc\Config->applyChanges(Array, Array)
#3 /usr/share/php/openmediavault/rpc/serviceabstract.inc(123): call_user_func_array(Array, Array)
#4 /usr/share/php/openmediavault/rpc/serviceabstract.inc(149): OMV\Rpc\ServiceAbstract->callMethod('applyChanges', Array, Array)
#5 /usr/share/php/openmediavault/rpc/serviceabstract.inc(620): OMV\Rpc\ServiceAbstract->OMV\Rpc\{closure}('/tmp/bgstatusbg...', '/tmp/bgoutput2q...')
#6 /usr/share/php/openmediavault/rpc/serviceabstract.inc(159): OMV\Rpc\ServiceAbstract->execBgProc(Object(Closure))
#7 /usr/share/openmediavault/engined/rpc/config.inc(199): OMV\Rpc\ServiceAbstract->callMethodBg('applyChanges', Array, Array)
#8 [internal function]: Engined\Rpc\Config->applyChangesBg(Array, Array)
#9 /usr/share/php/openmediavault/rpc/serviceabstract.inc(123): call_user_func_array(Array, Array)
#10 /usr/share/php/openmediavault/rpc/rpc.inc(86): OMV\Rpc\ServiceAbstract->callMethod('applyChangesBg', Array, Array)
#11 /usr/sbin/omv-engined(537): OMV\Rpc\Rpc::call('Config', 'applyChangesBg', Array, Array, 1)
#12 {main}

Alles anzeigen

fbeye · 25. Dezember 2023

Fixed It!

Stupid me forgot to update the allowed network on the server side from [old] 192.168.5.0 to 192.168.2.0 [new]

Works now.

ACL/Firewall [NFS], which Ports?

fbeye 24. Dezember 2023

crashtest 25. Dezember 2023

Jetzt mitmachen!

Ähnliche Themen

Upgrade experience 6.x -> 7.x