The Network File System — whole file systems mounted over the network, on the best-known port in the 2000s.
The NFS server daemon (nfsd) answers here, serving remote file system operations over TCP or UDP; RFC 5665 also registers NFS over SCTP. NFSv2 and v3 (RFC 1813) needed rpcbind on 111 plus separately bound mountd, statd and lockd helpers, while NFSv4 (RFC 8881) dropped that entirely and specifies 2049 as the single well-known port carrying mounting and locking in-band. You will find it on Linux and BSD file servers, NAS appliances, ESXi datastores and macOS, usually alongside 111 if v3 is still enabled. With the default AUTH_SYS flavour the server trusts the client's claimed UID and GID, so the export's access control is really the client's honesty plus your export list.
Do not expose
AUTH_SYS lets anyone who can reach the port assert any UID, so an internet-facing export is readable and often writable by strangers. Keep NFS on a private network or a VPN, and require Kerberos (sec=krb5p) if it must cross untrusted paths.
$ showmount -e TARGETSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.