I'm not sure if this is the place to ask the question but the forum was very helpful in the past
I have a multi home NAS (OMV 7) one connection is to the DMZ and servers in the DMZ can mount NFS Shares (Mac, Ubuntu). The other nic of the NAS server is connected to the private lan fronted by NordVPN Wiregourd configured on the router. When I try to mount an NFS in this scenario I get "there was a problem connecting to the server" which is strange since I can ping the NAS server on its private IP, I can SSH to the serverand I can mount SMB but not NFS.
here are my config files:
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd9f:e77e:5ee4::/48'
option packet_steering '1'
config device
option name 'br-lan'
option type 'bridge'
list ports 'eth0'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '10.0.7.1'
option netmask '255.255.255.0'
config interface 'wan'
option proto 'dhcp'
option device 'eth1'
config interface 'dmz'
option proto 'static'
option device 'eth2'
option ipaddr '10.20.7.1'
option netmask '255.255.255.0'
config interface 'nord_chi'
option proto 'wireguard'
option private_key ******
list addresses '10.5.0.2/32'
option mtu '1420'
list dns '103.86.96.100'
list dns '103.86.99.100'
option delegate '0'
config wireguard_nord_chi
option description 'Imported peer configuration'
option public_key '******
list allowed_ips '0.0.0.0/0'
option persistent_keepalive '25'
option endpoint_host 'us10576.nordvpn.com'
option endpoint_port '51820'
Firewall
config defaults
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'wan6'
list network 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config include 'pbr'
option fw4_compatible '1'
option type 'script'
option path '/usr/share/pbr/firewall.include'
config zone
option name 'dmz'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
option mtu_fix '1'
list network 'dmz'
config forwarding
option src 'dmz'
option dest 'wan'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
option mtu_fix '1'
config zone
option name 'nord'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'nord_chi'
option masq '1'
option mtu_fix '1'
config forwarding
option src 'lan'
option dest 'nord'
config redirect
option dest 'dmz'
option target 'DNAT'
option name '3333'
option family 'ipv4'
list proto 'tcp'
option src 'wan'
option src_dport '3333'
option dest_ip '10.20.7.69'
config redirect
option dest 'dmz'
option target 'DNAT'
option name '37889'
option family 'ipv4'
list proto 'tcp'
option src 'wan'
option src_dport '37889'
option dest_ip '10.20.7.69'
DHCP
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option cachesize '1000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option localservice '1'
option ednspacket_max '1232'
config dhcp 'lan'
option interface 'lan'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'server'
option ra 'server'
list ra_flags 'managed-config'
list ra_flags 'other-config'
option start '100'
option limit '150'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
config dhcp 'dmz'
option interface 'dmz'
option start '50'
option limit '45'
option leasetime '12h'
Any help will be greatly appriciated