On Thu, 2009-05-07 at 14:57 +0200, Frank Steiner wrote: > Hi, > > I'm fighting with my firewall to get nfs-over-tcp through. > > The server is outside the firewall, the client is inside. The firewall > allows all tcp back-connections (without syn), no UDPs. Mount on the > client side worked fine with kernel 2.6.16 in SLES 10. > > Now when the NFS client is running SLES 11 with its kernel 2.6.27, > the NFS server tries to make UDP connections from its ports 111 and > 700 to different ports on the client. > > If the client is running SLES 10 with 2.6.16, those connections are > not tried from the server, no matter if the server runs 2.6.16 or > 2.6.27. > > So I've two questions: > 1) Should nfs-over-tcp still use any UDP ports at all? > 2) What has been changed in the client code between 2.6.16 and 2.6.27 > that could cause this behaviour? > > Is there a way to prevent those UDP connects? The default behaviour is to always try to use UDP to talk to mountd and the portmapper in order to minimize the number of ports that get left in the TIME_WAIT state. If you only want to use TCP, then you might try using '-omountproto=tcp' Cheers Trond PS: Note that nfs@xxxxxxxxxxxxxxxxxxxxx is deprecated due to poor anti-spam filtering. You should rather send posts directly to linux-nfs@xxxxxxxxxxxxxxx ------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you'll get full speed at 300 dpi even with all image processing features enabled. http://p.sf.net/sfu/kodak-com _______________________________________________ NFS maillist - NFS@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/nfs _______________________________________________ Please note that nfs@xxxxxxxxxxxxxxxxxxxxx is being discontinued. Please subscribe to linux-nfs@xxxxxxxxxxxxxxx instead. http://vger.kernel.org/vger-lists.html#linux-nfs -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
