Check if port 2049 is open
On the server, see what is listening:
sudo ss -tulpn | grep ':2049 '
From another machine, test reachability:
nc -zv your-server.example.com 2049
Block port 2049 from the internet
With UFW (Ubuntu/Debian):
sudo ufw deny 2049
With firewalld (RHEL/AlmaLinux/Rocky):
sudo firewall-cmd --permanent --remove-port=2049/tcp && sudo firewall-cmd --reload