From owner-freebsd-security  Wed Jun  5 17: 1: 7 2002
Delivered-To: freebsd-security@freebsd.org
Received: from spork.pantherdragon.org (spork.pantherdragon.org [206.29.168.146])
	by hub.freebsd.org (Postfix) with ESMTP id 5DD8637B403
	for <freebsd-security@FreeBSD.ORG>; Wed,  5 Jun 2002 17:01:04 -0700 (PDT)
Received: from spark.techno.pagans (spark.techno.pagans [4.61.202.145])
	by spork.pantherdragon.org (Postfix) with ESMTP
	id 111D2471DA; Wed,  5 Jun 2002 17:01:03 -0700 (PDT)
Received: from pantherdragon.org (speck.techno.pagans [172.21.42.2])
	by spark.techno.pagans (Postfix) with ESMTP
	id C3123FEBE; Wed,  5 Jun 2002 17:01:00 -0700 (PDT)
Message-ID: <3CFEA63C.F2B42654@pantherdragon.org>
Date: Wed, 05 Jun 2002 17:01:00 -0700
From: Darren Pilgrim <dmp@pantherdragon.org>
X-Mailer: Mozilla 4.76 [en] (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Mario Pranjic <mario.pranjic@irb.hr>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: samba and ipfw
References: <Pine.GSO.4.32.0206051243390.25024-100000@nippur.irb.hr>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Mario Pranjic wrote:
> # samba
> add 660 allow tcp from any to me 138,139,445 setup keep-state
> add 661 pass udp from any 139 to me 139 keep-state

SMB uses tcp 139 to/from 1024-65535 and udp 137,138 to/from any.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message