SUMMARY: Portmap and mountd

From: jpfitz@fnal.gov
Date: Fri Jun 13 2003 - 16:20:12 EDT


I got the message from the list administrator and felt guilty. Due to
the number of replies I got, (ZERO!) either it's not possible or
nobodyknows how to do it.

Jim Fitzmaurice
jpfitz@fnal.gov

UNIX is very user friendly, It's just very particular about who it
makesfriends with.

----- Original Message -----
From: "Jim Fitzmaurice" <jpfitz@fnal.gov>
Date: Thursday, June 6, 2002 1:25 pm
Subject: Portmap and mountd
Managers,

   Found a similar question in the archives, but couldn't locate a
summary.

   First a quick background. For security reasons, we have our
"critical" systems behind a router with access controls, allowing only
certain ports to go through. We have one machine that sits on the other
side of this router.

This machine read-only mounts several disks from the "critical"
systems. We "allowed" a range of ports in the router for the mountd to
use, and this has worked well for several months now.

   Today, due to a scheduled power outage, we had to powerdown all the
machines. Everything came back up just fine behind the router, but
mountd is NFS mounting on a port outside the range we allowed so we
can't mount disks on the machine on the other side. The mount request
are being denied at the router.

   My question is how does the portmap and mountd decide which port to
run across? Also, can the range of ports it uses be limited to a
specific range, or "hardwired" to a single port? If it is possible, are
there any known adverse consequences to either of the above?

James Fitzmaurice
D0 Online Systems Manager
Fermi National Accelerator Laboratory
(630) 840-4011
jpfitz@fnal.gov

UNIX is very user friendly, It's just very particular about who it
makes friends with.



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:23 EDT