[Gluster-users] Firewall settings on Centos 6.4 GlusterFS 3.3.2

[Bobby Jacob]

Hi,
On centos 6.4 running with GlusterFS 3.3.2, these are the only rules I have enabled on Gluster servers.

-A INPUT -m state --state NEW -m tcp -p tcp --dport 24007:24008 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 24009:24012 -j ACCEPT

I'm not doing any nfs mounts. IS THIS ENOUGH ?? 

ALSO WHICH ARE THE PORTS TO ALLOW FOR CLIENTS TO WORK WITH GLUSTER VOLUMES ??

Thanks & Regards,
Bobby Jacob


-----Original Message-----
From: James [mailto:purpleidea at gmail.com] 
Sent: Sunday, September 29, 2013 8:56 AM
To: Bobby Jacob
Cc: gluster-users at gluster.org
Subject: Re: [Gluster-users] Firewall settings on Centos 6.4 GlusterFS 3.3.2

On Sun, 2013-09-29 at 05:49 +0000, Bobby Jacob wrote:
> Hi,
> 
> One centos6.4, if we want to enable the OS firewall, what are the ports to be left opened in the iptables ??
Look in the code for specifics.
https://github.com/purpleidea/puppet-gluster
Also:
glusterd's management port is 24007/tcp and 
                    24008/tcp if you use rdma. Bricks (glusterfsd) use
24009 & 
                    up for <3.4 and 49152 & up for 3.4. (Deleted volumes do not 
                    reset this counter.) Additionally it will listen on 
                    38465-38467/tcp for nfs, also 38468 for NLM since 3.3.0. 
                    NFS also depends on rpcbind/portmap on port 111 and
2049 
                    since 3.4.


> 
> Thanks & Regards,
> Bobby Jacob
> 
> 
> _______________________________________________
> Gluster-users mailing list
> Gluster-users at gluster.org
> http://supercolony.gluster.org/mailman/listinfo/gluster-users