iptables rules to allow nautilus samba access

From: Bill Tangren (bjt_at_aa.usno.navy.mil)
Date: 07/27/05

  • Next message: Will McDonald: "Re: iptables rules to allow nautilus samba access" 
    Date: Wed, 27 Jul 2005 17:09:27 -0400
To: General Red Hat Linux discussion list <redhat-list@redhat.com>

    I am trying to get access to the windows network neighborhood via
    smb:/// in nautilus. If I turn off iptables, it works just fine. If I
    turn it back on, it doesn't. Ethereal indicates that the traffic (with
    iptables turned off) looks like:

    protocol: NBSS
    Source Port (my box): 33406
    Destination Port (another box on the LAN): netbios

    The protocol is sometimes TCP, and sometimes LANMAN.

    These high ports change when I open a new nautilus process.

    These are the rules I have in iptables for samba (output from service
    iptables status):

    Chain udp_inbound (1 references)
    target prot opt source destination
    ACCEPT udp -- 10.1.5.0/24 0.0.0.0/0 udp
    dpts:137:139
    ACCEPT udp -- 10.1.5.0/24 0.0.0.0/0 udp dpt:445
    RETURN udp -- 0.0.0.0/0 0.0.0.0/0

    Chain tcp_inbound (1 references)
    target prot opt source destination
    ACCEPT tcp -- 10.1.5.0/24 0.0.0.0/0 tcp
    dpts:137:139
    ACCEPT tcp -- 10.1.5.0/24 0.0.0.0/0 tcp dpt:445
    ACCEPT tcp -- 10.1.5.0/24 0.0.0.0/0 tcp dpt:32890
    ACCEPT tcp -- 10.1.5.0/24 0.0.0.0/0 tcp dpt:32911
    RETURN tcp -- 0.0.0.0/0 0.0.0.0/0

    My LAN is obviously 10.1.5.*

    Does anyone know what ports I need to open to allow nautilus to access
    the network neighborhood?

    TIA,
    Bill Tangren 

    -- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: Will McDonald: "Re: iptables rules to allow nautilus samba access"

    Relevant Pages

    • RE: redhat-list Digest, Vol 4, Issue 38
      ... Re: Iptables: port 22 open only for my IP ... Windows Services for Unix 3.5 ... It does absolutely nothing if you have a rampant application on your Windows box that opens a port to the outside world. ...
      (RedHat)
    • Firewall Rules Summary
      ... Subject: Firewall Rules Summary ... This script is provided "as is" with no implied warranty. ... this came from various howtos and articles on iptables that existed around ... #specific port denies>1024 tcp ...
      (Focus-Linux)
    • Re: Linux IPTables tutorial pdfs and plain text available.
      ... What you are referring to here are CHAINS. ... create as a user-defined chain in my iptables scripts to reject traffic ... need to allow port 20/tcp only if you're using active FTP. ... This is actually not a bash script, ...
      (comp.security.firewalls)
    • Re: Mitigating SYN flooding with Netfilter or net.ipv4.tcp_syncookies ?
      ... The only chink, if you will, is the protection ... a port scan, ... The soloution to is to use some of the 'experimental' patches to iptables, ... If you do rate limiting after this rule you will have much fewer syns to ...
      (Focus-Linux)
    • Re: portknocking question
      ... This is nice but still requires closing the port as a step when done. ... you can use a time out with the relevant iptables command ... You can easily close the connection automatically. ... In that example, any existing ssh connection, for example, will continue ...
      (Ubuntu)