stephan beirer
2003-Nov-04 13:45 UTC
[Shorewall-users] Re: Shorewall-users Digest, Vol 12, Issue 9
[shorewall-users-request@lists.shorewall.net wrote on Die Nov 04, 2003 at 12:00:26 -0800 To shorewall-users@lists.shorewall.net]: sorry - I get this list as a digest, so i don''t know if I reply properly..> Message: 6 > Date: Tue, 4 Nov 2003 20:41:11 +0100 (CET) > From: Remco Barendse <shorewall@barendse.to> > Subject: Re: [Shorewall-users] Connection rejected but no message in > log? > To: Shorewall Users Mailing List <shorewall-users@lists.shorewall.net> > Message-ID: > <Pine.LNX.4.44.0311042035360.30268-100000@raveon.barendse.to> > Content-Type: TEXT/PLAIN; charset=US-ASCII > > Thanks!!! :) > > Now I now what got rejected, but not why. > > This is the line from the log: > Nov 4 20:32:45 xxx kernel: Shorewall:loc2fw:REJECT:IN=eth0 OUT= > MAC=00:a0:24:a9:30:bb:00:06:25:c1:06:86:08:00 SRC=10.10.0.2 DST=10.10.0.1 > LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=32614 DF PROTO=TCP SPT=33575 DPT=445 > WINDOW=5840 RES=0x00 SYN URGP=0 > > I really haven''t got a clue why a Linux client needs to communicate with > another Linux host on port 445 whereas the Windows client doesnt.hmm - looks like your linux box is somehow behaving like a W2K box. are you sure it''s really linux inside ;) look here: http://www.ntsecurity.nu/papers/port445/> > Oops, I should think before I type, ofcourse I know: > > The workstation is running samba 3.00, guess Samba tries some funny Active > Directory stuff and just burns and dies when that fails :( > > In common.def I see that udp 445 is discarded silently as well. Should I > allow that too??My w3k box worked with the samba3 server (on a shorewalled box) only after i REJECTed packets to port 445 instead of DROPing them. greetings from berlin: stephan. ___________________________________________________________________________ stephan beirer invalidenstr 42 10115 berlin/germany theoretical biophysics phon +49 30 2093 8694 room 501 institute of biology http://itb.biologie.hu-berlin.de/~beirer humboldt university of berlin mail s.beirer@biologie.hu-berlin.de