Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[SOLVED] sharing over NFS
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
EtherealSoul
n00b
n00b


Joined: 06 May 2003
Posts: 34
Location: Portugal

PostPosted: Thu Jun 02, 2005 8:48 am    Post subject: [SOLVED] sharing over NFS Reply with quote

Hi all ...

I'm having a problem mounting a share volume that I share.
Basically it's my firewall but I'm having problem due to the configuration of it.

Rules
AllowSSH fw loc tcp ssh
AllowSSH loc fw tcp ssh
ACCEPT fw loc tcp 2401
ACCEPT loc fw tcp 2401
ACCEPT fw loc tcp http
ACCEPT fw fw tcp pop3
ACCEPT fw fw tcp smtp
ACCEPT fw loc tcp pop3
ACCEPT fw loc tcp smtp
ACCEPT loc fw tcp pop3
ACCEPT loc fw tcp ssh
ACCEPT fw loc tcp ssh
ACCEPT loc fw tcp smtp
ACCEPT loc fw tcp ftp
ACCEPT loc fw udp nfs
ACCEPT loc fw tcp nfs
ACCEPT fw loc udp nfs
ACCEPT fw loc tcp nfs
AllowPing loc fw

policy:
loc net ACCEPT
fw loc ACCEPT
fw fw ACCEPT
net all ACCEPT info


Everythime I try to connect -i get this message:

Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:0f:b0:36:ce:ed:08:00:20:b0:f3:b0:08:00 SRC=129.157.70.50 DST=129.157.70.160 LEN=84 TOS=0x00 PREC=0x00 TTL=255 ID=11524 DF PROTO=UDP SPT=32815 DPT=111 LEN=64
Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:0f:b0:36:ce:ed:08:00:20:b0:f3:b0:08:00 SRC=129.157.70.50 DST=129.157.70.160 LEN=84 TOS=0x00 PREC=0x00 TTL=255 ID=11525 DF PROTO=UDP SPT=32816 DPT=111 LEN=64
Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:0f:b0:36:ce:ed:08:00:20:b0:f3:b0:08:00 SRC=129.157.70.50 DST=129.157.70.160 LEN=84 TOS=0x00 PREC=0x00 TTL=255 ID=11526 DF PROTO=UDP SPT=32817 DPT=111 LEN=64
Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:0f:b0:36:ce:ed:08:00:20:b0:f3:b0:08:00 SRC=129.157.70.50 DST=129.157.70.160 LEN=84 TOS=0x00 PREC=0x00 TTL=255 ID=11527 DF PROTO=UDP SPT=32818 DPT=111 LEN=64
Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:0f:b0:36:ce:ed:08:00:20:b0:f3:b0:08:00 SRC=129.157.70.50 DST=129.157.70.160 LEN=84 TOS=0x00 PREC=0x00 TTL=255 ID=11528 DF PROTO=UDP SPT=32819 DPT=111 LEN=64
Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:0f:b0:36:ce:ed:08:00:20:b0:f3:b0:08:00 SRC=129.157.70.50 DST=129.157.70.160 LEN=84 TOS=0x00 PREC=0x00 TTL=255 ID=11529 DF PROTO=UDP SPT=32820 DPT=111 LEN=64
Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:0f:b0:36:ce:ed:08:00:20:b0:f3:b0:08:00 SRC=129.157.70.50 DST=129.157.70.160 LEN=84 TOS=0x00 PREC=0x00 TTL=255 ID=11530 DF PROTO=UDP SPT=32821 DPT=111 LEN=64
Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:0f:b0:36:ce:ed:08:00:20:b0:f3:b0:08:00 SRC=129.157.70.50 DST=129.157.70.160 LEN=84 TOS=0x00 PREC=0x00 TTL=255 ID=11531 DF PROTO=UDP SPT=32822 DPT=111 LEN=64


thanks all
_________________
Death is just another step to get into another plane of existence.


Last edited by EtherealSoul on Wed Jun 08, 2005 11:33 am; edited 1 time in total
Back to top
View user's profile Send private message
kernelsensei
Bodhisattva
Bodhisattva


Joined: 22 Feb 2004
Posts: 5619
Location: Woustviller/Moselle/FRANCE (49.07°N;7.02°E)

PostPosted: Thu Jun 02, 2005 10:23 am    Post subject: Reply with quote

Hi,

I don't know what your loc is exactly.

But you've to accept the UDP traffic on the destination port 111 (with eth0 as input interface)

I'm not familiar with shorewall, raw iptables rules would be more helpful for me ...
_________________
$ ruby -e'puts " .:@BFegiklnorst".unpack("x4ax7aaX6ax5aX15ax4aax6aaX7ax2aX5aX8 \
axaX3ax8aX4ax6aX3aX6ax3ax3aX9ax4ax2aX9axaX6ax3aX2ax4ax3aX4aXaX12ax10aaX7a").join'
Back to top
View user's profile Send private message
EtherealSoul
n00b
n00b


Joined: 06 May 2003
Posts: 34
Location: Portugal

PostPosted: Thu Jun 02, 2005 5:18 pm    Post subject: Reply with quote

Quote:
loc eth0 detect dhcp
loc eth1 detect dhcp


the eth1 is a wireless and I rarely use it ... with other I things I don't have any problem ... just nfs ...
_________________
Death is just another step to get into another plane of existence.
Back to top
View user's profile Send private message
EtherealSoul
n00b
n00b


Joined: 06 May 2003
Posts: 34
Location: Portugal

PostPosted: Mon Jun 06, 2005 8:41 am    Post subject: SOLVED Reply with quote

Solved my problem ...
forgot to accept connection from loc to fw ....

cya
_________________
Death is just another step to get into another plane of existence.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum