iptables & samba -- quick question

**mcohn** · 07-07-2005, 05:58 PM

I followed the instructions at iptablesrocks.org to set up a firewall for my home network. It's working great, and I can see the benefits immediately just by checking the logs.

Problem is I have this box connected to 3 other windows machines and 1 mac via samba. Samba worked beautifully before I installed the iptables rules. I've scoured the web for instructions on how to fix this, but can't seem to get it working. Any assistance would be greatly appreciated.

ifconfig results:

Code:

eth0      Link encap&#58;Ethernet  HWaddr 00&#58;08&#58;74&#58;C2&#58;95&#58;16  
          inet addr&#58;192.168.1.10  Bcast&#58;192.168.1.255  Mask&#58;255.255.255.0
          inet6 addr&#58; fe80&#58;&#58;208&#58;74ff&#58;fec2&#58;9516/64 Scope&#58;Link
          UP BROADCAST RUNNING MULTICAST  MTU&#58;1500  Metric&#58;1
          RX packets&#58;101305914 errors&#58;684749 dropped&#58;331602 overruns&#58;0 frame&#58;115992
          TX packets&#58;203890532 errors&#58;0 dropped&#58;0 overruns&#58;0 carrier&#58;12
          collisions&#58;0 txqueuelen&#58;1000 
          RX bytes&#58;564101728 &#40;537.9 Mb&#41;  TX bytes&#58;3956813268 &#40;3773.5 Mb&#41;
          Interrupt&#58;11 

eth1      Link encap&#58;Ethernet  HWaddr 00&#58;00&#58;C5&#58;53&#58;21&#58;88  
          inet addr&#58;192.168.1.110  Bcast&#58;192.168.1.255  Mask&#58;255.255.255.0
          inet6 addr&#58; fe80&#58;&#58;200&#58;c5ff&#58;fe53&#58;2188/64 Scope&#58;Link
          UP BROADCAST RUNNING MULTICAST  MTU&#58;1500  Metric&#58;1
          RX packets&#58;0 errors&#58;7335394 dropped&#58;0 overruns&#58;0 frame&#58;0
          TX packets&#58;0 errors&#58;24 dropped&#58;0 overruns&#58;0 carrier&#58;67
          collisions&#58;0 txqueuelen&#58;1000 
          RX bytes&#58;0 &#40;0.0 b&#41;  TX bytes&#58;0 &#40;0.0 b&#41;
          Interrupt&#58;11 Base address&#58;0xc000 

lo        Link encap&#58;Local Loopback  
          inet addr&#58;127.0.0.1  Mask&#58;255.0.0.0
          inet6 addr&#58; &#58;&#58;1/128 Scope&#58;Host
          UP LOOPBACK RUNNING  MTU&#58;16436  Metric&#58;1
          RX packets&#58;3087675 errors&#58;0 dropped&#58;0 overruns&#58;0 frame&#58;0
          TX packets&#58;3087675 errors&#58;0 dropped&#58;0 overruns&#58;0 carrier&#58;0
          collisions&#58;0 txqueuelen&#58;0 
          RX bytes&#58;1098955532 &#40;1048.0 Mb&#41;  TX bytes&#58;1098955532 &#40;1048.0 Mb&#41;

Kind regards,
Michael

**LinuxFreak** · 07-10-2005, 09:56 PM

Dear mcohn,
Hello,

Also use these rules !!

# iptables -I INPUT -p tcp --dport 137 -j ACCEPT
# iptables -I INPUT -p udp --dport 137 -j ACCEPT
# iptables -I INPUT -p tcp --dport 138 -j ACCEPT
# iptables -I INPUT -p udp --dport 138 -j ACCEPT
# iptables -I INPUT -p tcp --dport 139 -j ACCEPT
# iptables -I INPUT -p udp --dport 139 -j ACCEPT

Best Regards.

**dev_rhce** · 10-07-2005, 06:41 AM

make this rule as well.

# iptables -I INPUT -p tcp --dport 445 -j ACCEPT
# iptables -I INPUT -p udp --dport 445 -j ACCEPT

ok.

u can also visit
http://www.linuxcops.com
or
http://forum.linuxcops.com
for howtos...