NFS : Should I temporarily stop my firewall at every boot-up ?

English Network/Internet
1

Every time I boot my computers, I cannot access my shared folders from the NFS client until I stop the firewall. Once I access the folders, I can re-enable the firewall and it continues working, but do I need to do that every time ? According to the YaST NFS Client openSUSE wiki page:

On first configuration you must turn off the Firewall. Otherwise you can not (probably) detect the NFS servers on the LAN.

So I interpret it as “only the first time”.
I didn’t find an openSUSE wiki for the NFS Server. It would be nice to have one as well.

2

Did you configure your NFS client using YaST or did you try to configure your Firewall “manualy”?

3

I did all of it with YaST. Also I didn’t mention that I added NFS Client and NFS server to the allowed services in the Firewall.

4

Thanks. I vaguely thought of the fact that apart from the NFS protocol, also RPC is used for the portmapper, and then several posts are defined for use through the portmapper and those ports must of course not be blocked. As you report something that I hve not seen earlier here, my idea was that you may have configured in a “not standard” way (where YaST would have taken care of the peculiarities). Thus my question.

I still think that the fact that other NFS client systems seem to run without this problem (I have seen no reports here and also assume that many use SuSeFirewall2) iss a point that should not be forgotten in analysing this.

5

What other NFS clients do you have in mind ? I’d like to test it.

6

Woops, I think I spoke too fast. I tried opening The file browser with root privileges and clicking on the unmounted NFS partition while the firewalls were on and it worked.
Still, having to open as root is an additional step that I’d like to avoid. Is that obligatory ?

7

That is purely permissions

I assume you mount the NFS in fstab so show use /etc/fstab

8

Here’s the fstab line referring to my NFS share :

192.168.1.100:/home/caetano/Documents    /home/caetano/NFS\040Shares/Documents    nfs    noauto 0 0

What should I change to disable the need for root access ?

9

It’s possible that this is Bug 1013747.

If that’s the same problem, then I am using Yast to stop the firewall, and then start it again (still within the Yast firewall program).

I’m currently checking from a client before I stop/start the firewall. I have considered just doing that every time without checking.

10

Thanks but as I said in a previous post, I spoke too early and I actually don’t have that problem.

11

Read

man 8 mount

Look for the section

FILESYSTEM INDEPENDENT MOUNT OPTIONS

and in thre for the options

user
Allow an ordinary user to mount the filesystem. The name of the mounting user is written to mtab so that he can unmount the filesystem again. This option implies the options noexec, nosuid, and nodev (unless overridden by subsequent options, as in the option line user,exec,dev,suid).
nouser
Forbid an ordinary (i.e., non-root) user to mount the filesystem. This is the default.
users
Allow every user to mount and unmount the filesystem. This option implies the options noexec, nosuid, and nodev (unless overridden by subsequent options, as in the option line users,exec,dev,suid).

and make a choice of what you want.