How does lockd work when specifying mountd port.

How does lockd work when specifying mountd port.

[Erik Enge]

Hi.

I have opened ports 111, 2049 and 32700 through my firewall for NFS
traffic.  32700 is for mountd.  I am wondering how lockd works under
these conditions?  Does it talk through one of the mention ports or does
it not work (I can't see any dropped packets, but lockd is still
running).

Also, how does this work with many NFS clients?  Will they all go
through 32700 for mounting and will this cause a problem?

Thanks,

Erik Enge.



-------------------------------------------------------
This SF.NET email is sponsored by: Take your first step towards giving 
your online business a competitive advantage. Test-drive a Thawte SSL 
certificate - our easy online guide will show you how. Click here to get 
started: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0027en
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

Re: How does lockd work when specifying mountd port.

[Steve Dickson]

it turns out with RH8.0 (maybe earlier versions as well) you can
specify the port at insmod time by setting nlm_udpport or
nlm_tcpport

You can also sett nlm_grace_period and nlm_timeout as well...

Erik Enge wrote:

>Steve Dickson <SteveD@4Dicksons.org> writes:
>
>  
>
>>Lockd gets an enumerated port number and then registers
>>it with the portmapper. Then processes ask portmapper
>>(or rpcbind if your talking to Solaris) for the port. so you will
>>have to open up the port after lockd has started.  IMHO, This may not
>>be too wise to opening up all these ports,
>>you might want to think of using a VPN or SSH....
>>    
>>
>
>Thanks for your reply.
>
>Is there no way I can specify this port and have all processes use the
>same port and then open only that one through the firewall?
>
>I guess this means that I'm not using lockd at the moment.  Not
>devastating considering we have virtually only one NFS client.
>
>Erik.
>  
>



-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs