samba - Oct 2002 - FireWall Effects on Samba (Newbie)

Dear List,

I have been wrestling with getting Samba 2.2.5 on Redhat 7.1 working on a
Windows NT network containing W2K, W98 and Mac machines. I can see the Samba
server (gargoyle) from the Win machines fine, but cannot browse any shares
(Network unreachable error message).  This seems a relatively common problem,
but seems harder to resovle in my case :-)

I have walked through the toubleshooting chapter and fail at a certain point. If
I use "net view" from the Win machines I see the server, but "net
view \\gargoyle" fails, but should have listed the available shares.
Interestingly from the linux side I can browse outwards and see shares on the
Win machines and the NT server fine. I can see the samba shares fine from the
linux side but "nmblookup -B 192.168.1.253 gargoyle" command returns a
"name query failed" result (.253 is the NT server). Presumably then
gargoyle is not announcing itself correctly?

BTW I have added the linux server to the NT's LMHOSTS file and to the Win
machines LMHOSTS file and this helps with name resolution but not the share
problem. I have added the users to the linux system and to the samba password
file and just aboiut every other thing suggested in the troubleshooting chapter.

OR, is it to do with firewall configuration rejecting the packets at the lowest
level? Given I am a Linux newbie, can someone provide a walkthrough of where I
go to broaden my firewall (if this really is the problem)?

I am at a loss as to where to go (smb.conf is shown below). Unless I crack this
and a netatalk installation I will be stuck with configuring a Mac server! Yuk!
BTW the netatalk stuff doesn't work either, hence the firewall suspicion.

cheers, Alex

[global]
   smb passwd file = /etc/samba/smbpasswd
   remote announce = 192.168.1.253
   dns proxy = no 
   security = user
   encrypt passwords = yes
   workgroup = ICON
   server string = Samba Server %v
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   netbios name = GARGOYLE
   log file = /var/log/samba/log.%m
   load printers = yes
   wins support = no
   printcap name = /etc/printcap
   max log size = 50
   guest account = pcguest

[homes]
   comment = Home Directories
   browseable = no
   writable = yes

[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = yes
   writable = no
   printable = yes

[tmp]
   comment = Temporary file space
   path = /tmp
   read only = no
   public = yes

[public]
   path = /iconshare
   public = yes
   only guest = yes
   writable = yes
   printable = no

-- 
Alexander C. Le Dain, PhD
Manager of Programming
ICON Technologies Pty Ltd
www.icon-tech.com.au

I am fairly certain RH 7.1 out of the box blocks port 139.
You will have to learn how to open up your ports to let samba work. I don't
use RH anymore, but you may have either iptables or ipchains on your system.


Joel

ipchains and iptables are mutually exclusive.

ipchains is older technology. iptables is supposed to be a big improvement
but I use ipchains because I know how to use it and they work for my
needs.

The biggest advantage I know about for iptables is it allows much greater
flexibility in controlling access to different ports. For example, with
iptables you can control access to a port depending on the time of day.
There is nothing in ipchains that allows that. With ipchains, you would have
to write a fancy script called by hosts.allow to get that kind of
flexibility. I would learn iptables.

Joel
On Mon, Oct 07, 2002 at 12:16:20PM +0800, Alex Le Dain
wrote:
> On 7/10/2002 11:26 AM, Joel Hammer <Joel@HammersHome.com> wrote:
> >I am fairly certain RH 7.1 out of the box blocks port 139.
> >You will have to learn how to open up your ports to let samba work. 
> >I don't
> >use RH anymore, but you may have either iptables or ipchains on your 
> >system.
> 
> Thanks Joel,
> 
> If I can bother you once more, can I have a quick pointer as to the
difference between ipchains and iptables? Can/do both exist?
> 
> cheers, Alex.
> 
> -- 
> Alexander C. Le Dain, PhD
> Manager of Programming
> ICON Technologies Pty Ltd
> www.icon-tech.com.au
> 
> 
>