What is port 2049 used for?
Network File System shares on Linux and Unix.
Should port 2049 be open?
Don’t expose to the internet. Keep this port on private networks and reach it through a VPN or SSH tunnel. NFS commonly trusts client IP addresses, so never expose it publicly.
See what is listening on port 2049
# Linux
sudo ss -tlnp | grep ':2049 '
# macOS
sudo lsof -nP -i TCP:2049 -sTCP:LISTEN
# Windows (PowerShell)
Get-NetTCPConnection -LocalPort 2049 -State Listen
Open or block port 2049 in a firewall
# Ubuntu / Debian (ufw)
sudo ufw allow 2049
sudo ufw deny 2049
# Windows (PowerShell, as administrator)
New-NetFirewallRule -DisplayName "Port 2049" -Direction Inbound -Protocol TCP -LocalPort 2049 -Action Allow
On cloud servers, also open the port in the provider’s security group or network firewall. At home, a service behind a router needs a port-forwarding rule to the device’s local IP.
Test it from outside
A port can be open on the server but blocked upstream. The Port Checker connects from the internet, so it shows what the world sees. From your own machine, use nc -vz example.com 2049 (macOS/Linux) or Test-NetConnection example.com -Port 2049 (Windows).