Quote:
Originally Posted by astouffer
Thanks for the quick replies. Oko's suggestion of disabling pf worked  Although I'm still not clear on how pf allowed the mount to happen but not function. |
Ok so now we know that you have misconfigured NFS server running on Solaris 10. For NFS to work you need 5 TCP and UDP ports open.
Code:
[root@athena ~]# rpcinfo -p gaia
program vers proto port service
100000 4 tcp 111 portmapper
100000 3 tcp 111 portmapper
100000 2 tcp 111 portmapper
100000 4 udp 111 portmapper
100000 3 udp 111 portmapper
100000 2 udp 111 portmapper
100000 4 7 111 portmapper
100000 3 7 111 portmapper
100000 2 7 111 portmapper
100005 1 udp 4002 mountd
100005 3 udp 4002 mountd
100005 1 tcp 4002 mountd
100005 3 tcp 4002 mountd
100003 2 udp 2049 nfs
100003 3 udp 2049 nfs
100003 2 tcp 2049 nfs
100003 3 tcp 2049 nfs
100024 1 udp 4000 status
100024 1 tcp 4000 status
100021 0 udp 4001 nlockmgr
100021 0 tcp 4001 nlockmgr
100021 1 udp 4001 nlockmgr
100021 1 tcp 4001 nlockmgr
100021 3 udp 4001 nlockmgr
100021 3 tcp 4001 nlockmgr
100021 4 udp 4001 nlockmgr
100021 4 tcp 4001 nlockmgr
While 111 and 2049 are standard you will have to force NFS server to use 4000, 4001, and 4002 for status, nlock, and mount daemon (both UDP and TCP). I only have FreeNAS and RedHat NFS servers. On RedHat there is a file /etc/sysconfig/nfs where you configure options for nfs server. On FreeNAS you have to separately call status, nlock, and mountd with specific flags. Then you can configure your OpenBSD client to allow outgoing traffic on those 5 ports in 2 different protocols (TCP and UDF).