## 启动后通过rpcinfo -p查看端口 ``` program vers proto port service 100000 4 tcp 111 portmapper 100000 3 tcp 111 portmapper 100000 2 tcp 111 portmapper 100000 4 udp 111 portmapper 100000 3 udp 111 portmapper 100000 2 udp 111 portmapper 100024 1 udp 60688 status 100024 1 tcp 53796 status 100003 2 tcp 2049 nfs 100003 3 tcp 2049 nfs 100003 4 tcp 2049 nfs 100227 2 tcp 2049 100227 3 tcp 2049 100003 2 udp 2049 nfs 100003 3 udp 2049 nfs 100003 4 udp 2049 nfs 100227 2 udp 2049 100227 3 udp 2049 100021 1 udp 51372 nlockmgr 100021 3 udp 51372 nlockmgr 100021 4 udp 51372 nlockmgr 100021 1 tcp 58758 nlockmgr 100021 3 tcp 58758 nlockmgr 100021 4 tcp 58758 nlockmgr 100005 1 udp 999 mountd 100005 1 tcp 999 mountd 100005 2 udp 999 mountd 100005 2 tcp 999 mountd 100005 3 udp 999 mountd 100005 3 tcp 999 mountd ``` ## 修改service文件,将RPC端口和NFS端口固定住, tail -10 /etc/services ``` asp 27374/udp csync2 30865/tcp # cluster synchronization tool dircproxy 57000/tcp # Detachable IRC Proxy tfido 60177/tcp # fidonet EMSI over telnet fido 60179/tcp # fidonet EMSI over TCP mountd 999/tcp # nfs mountd TCP mountd 999/udp # nfs mountd UDP nlockmgr 46929/tcp # nfs nlockmgr tcp nlockmgr 46929/udp # nfs nlockmgr UDP ``` ## 防火墙允许相应端口的TCP和UDP放行 ``` ACCEPT tcp -- 192.168.5.0/24 0.0.0.0/0 state NEW tcp dpt:111 ACCEPT tcp -- 192.168.5.0/24 0.0.0.0/0 state NEW tcp dpt:2049 ACCEPT tcp -- 192.168.5.0/24 0.0.0.0/0 state NEW tcp dpt:999 ACCEPT udp -- 192.168.5.0/24 0.0.0.0/0 state NEW udp dpt:111 ACCEPT udp -- 192.168.5.0/24 0.0.0.0/0 state NEW udp dpt:2049 ACCEPT udp -- 192.168.5.0/24 0.0.0.0/0 state NEW udp dpt:999 ```