2016년 3월 1일 화요일

To change RPC port for firewall.

One of customer wants to change the NFS RPC port for firewall.
They don't allow to open the ports below 1024 ( except some specific port 111, 22, etc )

So, I have to change the kernel paremeter like this :

NFS Server : MapR NFS server
NFS Client : Mint17.3

#sysctl -a | grep resvport

위의 결과값이 아래와 유사하다면

# sysctl -a | grep resvport
sunrpc.min_resvport = 665
sunrpc.max_resvport = 1023


$sudo vim /etc/sysclt.conf
...
sunrpc.min_resvport = 1024
sunrpc.max_resvport = 2048

$sudo reboot


$ sudo sysctl -a | grep resvport

sunrpc.max_resvport = 2048
sunrpc.min_resvport = 1024

$ sudo mount -o proto=tcp,mountproto=udp,port=2049 172.16.234.203:/mapr /home/hiboss1/test

$ df -h
Filesystem            Size  Used Avail Use% Mounted on
udev                  3.9G  4.0K  3.9G   1% /dev
tmpfs                 797M  3.8M  794M   1% /run
/dev/sda1              42G  5.6G   34G  15% /
none                  4.0K     0  4.0K   0% /sys/fs/cgroup
none                  5.0M     0  5.0M   0% /run/lock
none                  3.9G     0  3.9G   0% /run/shm
none                  100M  4.0K  100M   1% /run/user
172.16.234.203:/mapr  100G     0  100G   0% /home/hiboss1/test

$ sudo netstat -anop|grep 2049
tcp        0      0 172.16.234.205:1919     172.16.234.203:2049     TIME_WAIT   -                timewait (50.68/0/0)
tcp        0      0 172.16.234.205:1786     172.16.234.203:2049     ESTABLISHED -                keepalive (54.22/0/0)

$ sudo netstat -anop|grep 2049
tcp        0      0 172.16.234.205:1786     172.16.234.203:2049     ESTABLISHED -                keepalive (0.94/0/0) <<< port 1786 for NFS