[Shorewall-users] Samba

John Andersen
Wed, 29 May 2002 18:13:06 -0000

On 29 May 2002 at 9:44, Tom Eastep wrote:

 > > Apparently the rules as shown on the web page are not sufficient to

> > allow all SMB packets to be transmitted.
> > Loss of these seems to cause LinNeighborhood a great deal of
> > grief as it refuses to browse the network any further.  (Oddly these
> > are packets are not missed by the windows stations.
> >
> > If I add a line in the POLICY file like this:
> >  fw loc accept
> > Question:  Is this dangerous?   Is there a better way?
> >
>
> I''ve updated http://www.shorewall.net/samba.htm to include
additional
> rules.
>
> The problem is that Netfilter doesn''t track broadcasts so
responses to
> broadcasts to not match ESTABLISHED,RELATED rules designed to handle
> response packets.

Yes this works and has much less exposure.
Trailing colon I assume means all higher ports?

Thanks.

Note to the documentaion group:  The speckeled background
on the web page makes it EASY to miss some punctuation
(such as trailing colons).  A bolder font or a different BG might
help.

______________________________________
John Andersen
NORCOM / Juneau, Alaska