alfresco and iptables

[Les Mikesell]

Craig White wrote:

> #!/bin/sh
> #
> echo 1 > /proc/sys/net/ipv4/ip_forward
> modprobe iptable_nat
> iptables -F
> iptables -t nat -F
> iptables -P INPUT ACCEPT
> iptables -P FORWARD ACCEPT
> iptables -P OUTPUT ACCEPT
> iptables -t nat -A PREROUTING -p tcp -d 192.168.3.8 --dport 445 \
> -j REDIRECT --to-ports 1445
> iptables -t nat -A PREROUTING -p tcp -d 192.168.3.8 --dport 139 \
> -j REDIRECT --to-ports 1139
> iptables -t nat -A PREROUTING -p udp -d 192.168.3.8 --dport 137 \
> -j REDIRECT --to-ports 1137
> iptables -t nat -A PREROUTING -p udp -d 192.168.3.8 --dport 138 \
> -j REDIRECT --to-ports 1138
> 
> # smbclient -L 192.168.3.8
> Error connecting to 192.168.3.8 (Connection refused)
> Connection to 192.168.3.8 failed
> 
> # smbclient -L 192.168.3.8 -p 139
> Error connecting to 192.168.3.8 (Connection refused)
> Connection to 192.168.3.8 failed
> 
> # smbclient -L 192.168.3.8 -p 1139
> Password:
> Anonymous login successful
> Domain=[TH] OS=[Java] Server=[Alfresco CIFS Server 3.5.1]
> 
>         Sharename       Type      Comment
>         ---------       ----      -------
> cli_rpc_pipe_open_noauth: rpc_pipe_bind for pipe \srvsvc failed with
> error NT_STATUS_BUFFER_TOO_SMALL
>         Alfresco        Disk
>         IPC$            IPC
> Error connecting to 192.168.3.8 (Connection refused)
> Connection to 192.168.3.8 failed
> NetBIOS over TCP disabled -- no workgroup available
> 
> Same results either way... 

For each of the PREROUTING lines, add a matching OUTPUT entry like:

iptables -t nat -A PREROUTING -p tcp -d 192.168.3.8 --dport 445 \
  -j REDIRECT --to-ports 1445
iptables -t nat -A OUTPUT -p tcp -d 192.168.3.8 --dport 445 \
  -j REDIRECT --to-ports 1445

...and please post a summary if you get this and the Staroffice/lucene 
search working.

-- 
   Les Mikesell
    lesmikesell at gmail.com