Re: Samba Port 139 Netbios Connection Refused

From: 'Dungeon' Dave (Dungeon_at_tombstones.org.uk)
Date: 09/30/03 

Date: Tue, 30 Sep 2003 18:08:21 +0100

.. and it came to pass that Cory Smith <csmith@stu.parkland.edu> uttered
forth:
>
>'Dungeon' Dave <Dungeon@tombstones.org.uk> wrote in message
>news:<hAuMuAGkdfd$Ew5R@queeg.tombstones.org.uk>...
>> .. and it came to pass that Cory Smith <csmith@stu.parkland.edu> uttered
>> forth:
>> >
>> >So, thinking its a firewall problem, I ran nmap and noticed port 139
>> >was not open on my redhat9 OS.
>> >How would I open that port?
>>
>> run "lokkit" - check the firewall settings.
>>

(top-posting corrected)

>I edited my iptables and inserted
>A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 139 --syn -j ACCEPT
>then ran lokkit. switched my firewall settings to medium and opened
>port 139.

How did you check it was open?

> reboot my machine.

er... why?

> and still nothing worked.

After the reboot? I think you've snarled something more than just your
firewall.

>any suggestions?

Firstly, trim and bottom-post, so that the flow makes a bit more sense.

Secondly, you can check which services are listening on your machine
with: "netstat -n" - this should show port 139 in listening mode.

If it's listening but nmap shows it's not open, then there's still a
rule blocking it. The easiest method (but possibly not the safest) is to
stop your firewall first, using:

/etc/init.d/iptables stop

If it works after that, then there's a duff firewall rule. However, if
you've just rebooted your machine and nothing now works, I think you may
have duff hardware. 

-- 
"Dungeon" Dave

Relevant Pages

  • Re: opening ports
    ... If a service is listening but blocked by a firewall, ... If it's listening and not blocked, ... FTP is an evil protocol that has many traps. ... Basically when a client switches to passive mode, the FTP server ...
    (Ubuntu)
  • Re: Can I protect myself against network attacks?
    ... I consider the SP2 PFW "half a firewall", and many I've read say it ... or listening in, and no virus or trojans from a system scan via KAV. ... After all, the attacks did ...
    (comp.security.firewalls)
  • RE: Access to the servers from outside
    ... the first line shows us that port 80 is listening on ... > run the tcpdump command to see if we're actually receiving the TCP ... > We're definitely seeing the connection from the client, ... Let's focus on the firewall. ...
    (RedHat)
  • Re: Great Firewall/Australia censorship proposal
    ... My firewall has been configurd to block all incoming ... The filtering companies cannot crawl my site, ... Comments section on the station page, ... I see a lot of listening, ...
    (comp.security.firewalls)
  • Re: About security...
    ... services listening on the network interface - there are some listening ... off-chance that such a kernel flaw is discovered. ... you enable netfilter code in kernel - this is what you do when you use ... It will not be exposed unless you go and change your firewall config. ...
    (Ubuntu)