You are not logged in.

#1 2010-12-28 03:53:48

MarcoRosso
Member
Registered: 2009-02-08
Posts: 49

Samba IPtables help please

Hi everyone,

I need some help with this iptables and samba biz. Below is my smb.conf file and iptables.rules that I have in effect. The situation is I am unable to browse samba shares on my desktop (running windows 7 ultimate x64). I am able to connect to the shares from my laptop via my desktop. I have the GIT build of samba installed from the AUR, if that makes a difference.

SMB.conf:

[global]
server string = Archy SMB
workgroup = HOME
security = share
include = /etc/samba/smbshares.conf

wins support = yes
client ntlmv2 auth = no
client lanman auth = yes
lanman auth = yes

smbshares.conf:

[shared]        ; user="matt"
        #force user = matt
        path = /home/matt/share
        writable = yes
        public = yes

[pictures]      ; user="matt"
        #force user = matt
        path = /home/matt/Pictures
        writable = yes
        public = yes

iptables.rules:

# Generated by iptables-save v1.4.7 on Fri Apr  9 20:11:39 2010
*filter
:INPUT DROP [6:1178]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [1249:113411]

#Basic Firewall

-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
#SMB
-A INPUT -p tcp -m multiport --dports 445,135,136,137,138,139 -j ACCEPT
-A INPUT -p udp -m multiport --dports 445,135,136,137,138,139 -j ACCEPT
-A OUTPUT -p tcp -m multiport --dports 445,135,136,137,138,139 -j ACCEPT
-A OUTPUT -p udp -m multiport --dports 445,135,136,137,138,139 -j ACCEPT
#End SMB
#NFS
#-A INPUT -p tcp -m multiport --dports 111,2049,44095,48098 -j ACCEPT
#-A INPUT -p udp -m multiport --dports 111,2049,44095,55702 -j ACCEPT
#End NFS

#Firewall courtesy
-A INPUT -p tcp -j REJECT --reject-with tcp-reset
-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
#End Firewall

COMMIT
# Completed on Fri Apr  9 20:11:39 2010

Please note, I just edited the rules file instead of generating a new one each time.

Both services start, and run.

Best Regards,
MarcoRosso

Offline

Board footer

Powered by FluxBB