Re: Iptables rule for windows file sharing?

Temlakos wrote:

On Fri, 28 Jan 2005 13:02:27 -0600, Dale Sykora <dalen@xxxxxxxxxx> wrote:

I remember having to open port 445 also.
Here is what worked for me from /etc/sysconfig/iptables

-A RH-Firewall-1-INPUT -p udp --dport 137:138 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 139 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 445 -j ACCEPT

I just tried the above. And whenever I restart with that
configuration, I can't see my Windows box, or my own box, at all in
the "Networks" folder. Samba and Windows must be using some port or
ports other than those above.

And just so everyone understands, I try to limit it to just my home
network, thus:

-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -p udp --dport 137:138 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -p tcp --dport 139 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -p tcp --dport 445 -j ACCEPT

And as I say, I still don't have enough ports open.

I've also tried opening all TCP and UDP ports between 135 and 139, and
both the TCP and the UDP ports numbered 445. Still no result.

Temlakos

Temlakos,
Sorry it didn't work. I'll try and dig up when I posted this issue to the list many months ago. I didn't find it in my local email so I'll check the archives. You might want to tail -f the samba log file while testing to see if any errors show up.

Thanks,

Dale