From: Jim Fitzmaurice (jpfitz@fnal.gov)
Date: Thu Jun 06 2002 - 14:25:54 EDT
Managers,
Found a similar question in the archives, but couldn't locate a summary.
First a quick background. For security reasons, we have out "critical"
systems behind a router with access controls, allowing only certain ports to
go through. We have one machine that sits on the other side of this router.
This machine read-only mounts several disks from the "critical" systems. We
"allowed" a range of ports in the router for the mountd to use, and this has
worked well for several months now.
Today, due to a scheduled power outage, we had to powerdown all the
machines. Everything came back up just fine behind the router, but mountd is
NFS mounting on a port outside the range we allowed so we can't mount disks
on the machine on the other side. The mount request are being denied at the
router.
My question is how does the portmap and mountd decide which port to run
across? Also, can the range of ports it uses be limited to a specific range,
or "hardwired" to a single port? If it is possible, are there any known
adverse consequences to either of the above?
James Fitzmaurice
D0 Online Systems Manager
Fermi National Accelerator Laboratory
(630) 840-4011
jpfitz@fnal.gov
UNIX is very user friendly, It's just very particular about who it makes
friends with.
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:48:43 EDT