{"id":152,"date":"2017-10-10T07:20:00","date_gmt":"2017-10-10T07:20:00","guid":{"rendered":"https:\/\/linuxadmin.melberi.com\/uncategorized\/iptables-for-nfs-server"},"modified":"2017-10-10T12:21:38","modified_gmt":"2017-10-10T12:21:38","slug":"iptables-for-nfs-server","status":"publish","type":"post","link":"https:\/\/www.melberi.com\/linuxadmin\/iptables\/iptables-for-nfs-server","title":{"rendered":"Iptables for NFS Server ports"},"content":{"rendered":"

How to configure Linux iptables for NFS server on Cent OS Fedora Linux Ubuntu Debian Redhat<\/p>\n

NFS Pre Configuration
\n<\/span><\/h3>\n
\u00a0To enable NFS clients to access NFS server we need to enable the following services.<\/div>\n
<\/div>\n
a] TCP\/UDP 111 – RPC 4.0 portmapper
\nb] TCP\/UDP 2049 – NFSD (nfs server)
\nc] Portmap static ports – Dynamic ports defined in \/etc\/sysconfig\/nfs file.<\/div>\n
<\/div>\n
Port mapper assigns each NFS service to a port dynamically at service startup time.<\/div>\n
Dynamic ports cannot be protected by port filtering firewalls such as iptables.<\/div>\n
So we need to configure static ports for port map service<\/div>\n
<\/div>\n
Edit \/etc\/sysconfig\/nfs and add the below mentioned lines<\/div>\n
<\/div>\n
#vim \/etc\/sysconfig\/nfs<\/b><\/div>\n
<\/div>\n
 RQUOTAD_PORT=875\r\n LOCKD_TCPPORT=32803\r\n LOCKD_UDPPORT=32769\r\n MOUNTD_PORT=892\r\n STATD_PORT=662\r\n STATD_OUTGOING_PORT=2020<\/b><\/pre>\n
<\/div>\n
Save the file and restart the service<\/div>\n
<\/div>\n
# service portmap restart
\n# service nfs restart
\n# service rpcsvcgssd restart<\/b><\/div>\n
\n
Iptables for NFS<\/span><\/h3>\n<\/div>\n
<\/div>\n
IP tables configuration for nfs <\/b>
\nRun the following commands in Linux Shell.<\/div>\n
<\/div>\n
iptables -A INPUT -p tcp --dport 110 -j ACCEPT<\/b>\r\niptables -A INPUT -p udp --dport 110 -j ACCEPT<\/b>\r\niptables -A INPUT -p tcp --dport 2049 -j ACCEPT<\/b>\r\niptables -A INPUT -p tcp --dport 662 -j ACCEPT<\/b>\r\niptables -A INPUT -p udp --dport 662 -j ACCEPT<\/b>\r\niptables -A INPUT -p tcp --dport 875 -j ACCEPT<\/b>\r\niptables -A INPUT -p udp --dport 875 -j ACCEPT<\/b>\r\niptables -A INPUT -p tcp --dport 892 -j ACCEPT<\/b>\r\niptables -A INPUT -p udp --dport 892 -j ACCEPT<\/b>\r\niptables -A INPUT -p tcp --dport 32803 -j ACCEPT<\/b>\r\niptables -A INPUT -p udp --dport 32769 -j ACCEPT <\/b><\/pre>\n
\u00a0<\/b><\/div>\n
Now Save and restart iptables<\/div>\n
# iptables-save > \/etc\/sysconfig\/iptables<\/b>
\nor<\/b>
\n#service iptables save <\/b> <\/b><\/div>\n
#service iptables restart<\/b><\/p>\n
Also you can manually edit and \/etc\/sysconfig\/iptables and add the below mentioned line<\/p>\n
 <\/p>\n
 -A INPUT -p tcp -m tcp --dport\u00a0 110 -j ACCEPT<\/b>\r\n -A INPUT -p udp -m udp --dport\u00a0 110 -j ACCEPT<\/b>\r\n -A INPUT -p tcp -m tcp --dport\u00a0 662 -j ACCEPT<\/b>\r\n -A INPUT -p udp -m udp --dport\u00a0 662 -j ACCEPT\u00a0<\/b>\r\n -A INPUT -p tcp -m tcp --dport\u00a0 875 -j ACCEPT<\/b>\r\n -A INPUT -p udp -m udp --dport\u00a0 875 -j ACCEPT\u00a0<\/b>\r\n -A INPUT -p tcp -m tcp --dport\u00a0 892 -j ACCEPT<\/b>\r\n -A INPUT -p udp -m udp --dport\u00a0 892 -j ACCEPT<\/b>\r\n -A INPUT -p tcp -m tcp --dport\u00a0 2049 -j ACCEPT<\/b>\r\n -A INPUT -p tcp -m tcp --dport\u00a0 32803 -j ACCEPT<\/b>\r\n -A INPUT -p udp -m udp --dport\u00a0 32769 -j ACCEPT <\/b><\/pre>\n
<\/b>
\nSave the file and restart the service<\/p>\n
#service iptables restart<\/b>
\n <\/b>
\n<\/b><\/p>\n
<\/div>\n","protected":false},"excerpt":{"rendered":"
How to configure Linux iptables for NFS server on Cent OS Fedora Linux Ubuntu Debian Redhat NFS Pre Configuration \u00a0To enable NFS clients to access NFS server we need to… Read more »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[104,141],"tags":[],"class_list":["post-152","post","type-post","status-publish","format-standard","hentry","category-iptables","category-nfs"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t