firewall and smb

[Andy Green]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 27 June 2004 22:48, Jake Pronk wrote:
> is it me or did i set up the smb wrong? i have to add eth0 to trusted
> devices to be able to see my windoze computer. surely there must be
> another way around this.

"Trusted devices" is evil.  You can't trust any device since whatever is 
communicating through it may be perverted already.

> any help/guidiance is welcome

# make samba visible
iptables -I RH-Firewall-1-INPUT -p tcp -s 192.168.0.0/24 --destination-port 
137:139 -j ACCEPT
iptables -I RH-Firewall-1-INPUT -p udp -s 192.168.0.0/24 --dport 137:139 -j 
ACCEPT
iptables -I RH-Firewall-1-INPUT -p tcp -s 192.168.0.0/24 --destination-port 
445 -j ACCEPT

You may need to fiddle with the 192.168.0.0/24, that allows 192.168.0.* in for 
Samba access.

When it is good, stick it in /etc/rc.local so it will work every reboot.

- -Andy

- -- 
Automatic actions for USB cameras, cardreaders, memory sticks, MP3 players
http://warmcat.com/usbautocam
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA4AvVjKeDCxMJCTIRArtuAJ4jsCxg/q/OyaQeyigAe8fPCKCgYQCfZsEM
M6gSODW5EQxLQq287mUw1J0=
=zR6b
-----END PGP SIGNATURE-----