[appropriate]

Good Morning Everybody,

I am still having trouble with the firewall on the NFS server.

System A    192.168.1.13    Xubuntu Laptop     18.10                                     NFS Client

System B    192.168.1.14    Xubuntu Box         18.10                                      NFS Server

System C    192.168.1.8      Raspberry Pi 2      LibreElec 9.0.1 Kodi 18.1      NFS Client


Last night I thought I had resolved the issue after setting ports 80 and 443 (this was suggested by an old post that thought it might be of use in the future) and enabling the firewall. I watched a couple of TV shows without any issues, and went to bed. 

This morning System C could no longer access System B until I disabled the firewall on System B, then it had no problem. System A has no issues connecting to System B with the firewall on or off. 

So with the firewall disabled this morning I started a program on the Kodi system and then enabled the firewall again. That program is still running.

Here is the output of System B sudo ufw status:

Code:

Status: active
To                         Action      From
--                         ------      ----
111,2049/tcp               ALLOW       Anywhere                  
111,2049/udp               ALLOW       Anywhere                  
69/udp                     ALLOW       192.168.1.0/24            
111/tcp                    ALLOW       192.168.1.0/24            
13025/tcp                  ALLOW       192.168.0.0/24            
13025/tcp                  ALLOW       192.168.1.0/24            
2049                       ALLOW       192.168.1.14              
80                         ALLOW       Anywhere                  
443                        ALLOW       Anywhere                  
111,2049/tcp (v6)          ALLOW       Anywhere (v6)             
111,2049/udp (v6)          ALLOW       Anywhere (v6)             
80 (v6)                    ALLOW       Anywhere (v6)             
443 (v6)                   ALLOW       Anywhere (v6)             

111,2049/tcp               ALLOW OUT   Anywhere                  
111,2049/udp               ALLOW OUT   Anywhere                  
111,2049/tcp (v6)          ALLOW OUT   Anywhere (v6)             
111,2049/udp (v6)          ALLOW OUT   Anywhere (v6)


IPv6 is not available to me, so I know for certain that those items are not necessary, but not sure they harm anything.

Not sure why or how, but System C seems to have lost connection with System B overnight. 

Suggestions, thoughts?

[appropriate]

Hello everyone,

After many attempts and much frustration, I figured this out. Here is what I wound up with.

Status: active

To                         Action      From
--                         ------      ----
111,2049/tcp               ALLOW       Anywhere                   
111,2049/udp               ALLOW       Anywhere                   
13025/tcp                  ALLOW       192.168.0.0/24             
13025/tcp                  ALLOW       192.168.1.0/24             
192.168.1.14               ALLOW       192.168.1.8                (log)

111,2049/tcp               ALLOW OUT   Anywhere                   
111,2049/udp               ALLOW OUT   Anywhere                   
192.168.1.14               ALLOW OUT   192.168.1.8                (log)

Thanks for your attention

[appropriate]

those internal IP address are the Kodi box and the media server.