According to http://shorewall.net/ports.htm#NFS, you should create firewall rule for NFS service, please run the following:
config set NFS service TCPPorts 111 UDPPorts 111 access private status enabled↧
Help with mounted folders
↧