Shorewall users - Jun 2004 - shorewall doesn''t log dropped smb connection ?

Hello,
This is probably nothing, and I''m just the one missing something here.
But I''m
just curious.
I am trying to run samba in one of my machines that run shorewall. But I 
forgot to add the rule to allow smb connection in my /etc/shorewall/rules. Of 
course when I tried to access the smb share from another machine, I
couldn''t.
I fixed that quickly, no problem.

However, when I  looked at my /var/log/messages, I did not find any DROP log 
about that failed smb connection attempt. So I removed the lines in 
/etc/shorewall/rules about smb again,  and while doing "tail -f 
/var/log/messages" on that machine, I try to connect to the smb share from 
another machine. Nothing. No log saying that requests to whatever ports smb 
uses were dropped. While trying to telnet-ing to that machine, I can see log 
scrolling in /var/log/messages that the connection attempts to port 23 were 
dropped.
Is there something special about smb that I don''t know? am I missing 
something?

I use shorewal-1.4.x, 1 interface, 1 public IP (followed the quick start 
guides to get started a while ago).

Thanks.
RDB
-- 
Reuben D. Budiardja
Department of Physics and Astronomy
The University of Tennessee, Knoxville, TN
---------------------------------------------------------
"To be a nemesis, you have to actively try to destroy 
something, don''t you? Really, I''m not out to destroy 
Microsoft. That will just be a completely unintentional 
side effect."
                 - Linus Torvalds -

Reuben D. Budiardja wrote:

> Is there something special about smb that I don''t know? am I
missing
> something?
> 
If Shorewall logged dropped SMB traffic, every newbie who installed 
Shorewall would immediately post reporting that his firewall was under 
attack by his own systems.

Hence the ''common'' chain in Shorewall 1.4 and the Reject and
Drop common
actions in Shorewall 2.0 silently drop SMB traffic.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net