Samba and Firewall

[Bob Chiodini]

On Mon, 2005-03-07 at 12:52 +0800, Shu Hung (Koala) wrote:
> Hello
> I've been working on a Samba machine for a while.
> Recently, I tried to turn on its firewall.
> But my configuration to iptables is flawed somehow -- it is half right 
> and half wrong.
> 
> Here is what I've done:
>  - I used system-config-securitylevel to config new ports to open
>  - I've opened ports   139:tcp, 445:tcp, 137:udp, 138:udp
>  - I restart the iptables to load up the configs.
> 
> Here is the consequence right now:
>  - As I reboot my client PC, I cannot connect to samba shared folders -- 
> unless I stop iptables first
>  - After I've connected to Samba once, I can connect to Samba as many 
> time as I want to -- even if I start iptables again.
> 
> I guest one more port or something is responsible for the first 
> connection to the server.
> Does anybody have any idea?
> 
> -- 
Try turning on logging in iptables, if it's not already.
Check /var/log/messages to see what is being dropped, related to your
client.

Bob...