Cannot access NFS network files if firewalld is active

English Network/Internet
1

The NFS will not connect while the firewalld active.

Network is a lan connection between my HP laptop and desktop.
Both have openSuse 15.4 installed, running LXQT

I have been searching the forum and the following was very similar, but I have not been able to correct the issue.

Can only access nfs shares with firewalld disabled on server

systemctl status firewalld  
 firewalld.service - firewalld - dynamic firewall daemon
     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: disabled)
     Active: active (running) since Fri 2023-02-17 22:53:32 CST; 15h ago
       Docs: man:firewalld(1)
   Main PID: 1379 (firewalld)
      Tasks: 2 (limit: 4915)
     CGroup: /system.slice/firewalld.service
             └─ 1379 /usr/bin/python3 /usr/sbin/firewalld --nofork --nopid

Feb 17 22:53:29 localhost systemd[1]: Starting firewalld - dynamic firewall daemon...
Feb 17 22:53:32 localhost systemd[1]: Started firewalld - dynamic firewall daemon.

firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: eth0
  sources: 
  services: dhcpv6-client mountd nfs nfs3 rpc-bind samba ssh
  ports: 
  protocols: 
  forward: no
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules:

grep nfs /etc/services
netconfsoaphttp    832/tcp      # NETCONF for SOAP over HTTPS  [RFC4743]
netconfsoaphttp    832/udp      # NETCONF for SOAP over HTTPS  [RFC4743]
netconfsoapbeep    833/tcp      # NETCONF for SOAP over BEEP  [RFC4743]
netconfsoapbeep    833/udp      # NETCONF for SOAP over BEEP  [RFC4743]
nfsd-keepalive     1110/udp     # Client status info  [Beth_Crespo]
picknfs            1598/tcp     # picknfs  [John_Lombardo]
picknfs            1598/udp     # picknfs  [John_Lombardo]
shiva-confsrvr     1651/tcp     # shiva_confsrvr ;; IANA assigned this well-formed service name as a replacement for "shiva_confsrvr".  [Mike_Horowitz]
shiva_confsrvr     1651/tcp     # shiva_confsrvr  [Mike_Horowitz]
shiva-confsrvr     1651/udp     # shiva_confsrvr ;; IANA assigned this well-formed service name as a replacement for "shiva_confsrvr".  [Mike_Horowitz]
shiva_confsrvr     1651/udp     # shiva_confsrvr  [Mike_Horowitz]
nfs                2049/tcp     # Network File System - Sun Microsystems  [Brent_Callaghan]
nfs                2049/udp     # Network File System - Sun Microsystems  [Brent_Callaghan]
nfs                2049/sctp    # Network File System  [RFC5665]
3d-nfsd            2323/tcp     # 3d-nfsd  [Mike_Sherrill]
3d-nfsd            2323/udp     # 3d-nfsd  [Mike_Sherrill]
mediacntrlnfsd     2363/tcp     # Media Central NFSD  [Shivakumar_S_Govind]
mediacntrlnfsd     2363/udp     # Media Central NFSD  [Shivakumar_S_Govind]
winfs              5009/tcp     # Microsoft Windows Filesystem  [Simon_Skaria]
winfs              5009/udp     # Microsoft Windows Filesystem  [Simon_Skaria]
enfs               5233/tcp     # Etinnae Network File Service  [Chris_Peel]
nfsrdma            20049/tcp    # Network File System (NFS) over RDMA  [RFC5666]
nfsrdma            20049/udp    # Network File System (NFS) over RDMA  [RFC5666]
nfsrdma            20049/sctp   # Network File System (NFS) over RDMA  [RFC5666]
2

On my NFS server, I have configured the firewall to allow:

mountd
nfs
nfs3
rpc-bind

There are others, but I think these are the one needed for NFS. I’m not sure which, if any, of those were automatically setup. But I remember having to configure some of them.

I should add that this is for the public zone.

3

I believe all are set:

firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: eth0
  sources: 
  services: dhcpv6-client mountd nfs nfs3 rpc-bind samba ssh
  ports: 
  protocols:

Also, note that I am using Network Manager

4

I’m using “wicked”. I don’t know whether that makes a difference.

5

You stop firewall on client or on server?

All these commands were run on client or on server?

There are two systems involved in accessing remote resource. Both may be the reason why it does not work.

And you are actually using interface eth0 on the system where this output was generated for NFS traffic?

6

I am not quite sure what changed, but it is working now. There have been a couple of reboots, and I verified the firewall settings.

Client
Yes it is using eth0

firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: eth0
  sources: 
  services: dhcpv6-client mountd nfs nfs3 rpc-bind samba ssh
  ports: 
  protocols: 
  forward: no
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules:

Server

firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: eth0
  sources: 
  services: dhcpv6-client mountd nfs nfs3 rpc-bind samba ssh
  ports: 
  protocols: 
  forward: no
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules:
7

Thank you all for the help.