Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 13 Jun 2004 13:16:49 -0700
From:      Mike <addymin@pacbell.net>
To:        Bill Sawyer <bSawyer@sftp.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: ipfilter allowing samba
Message-ID:  <40CCB631.2050803@pacbell.net>
In-Reply-To: <s0cb7bc4.027@mail.sftp.com>
References:  <s0cb7bc4.027@mail.sftp.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Bill Sawyer wrote:
> Hey Dave,
> 
> You need to allow exceptions in ipfilter for ports 137 to 139.  The following rules should work:
> 
> pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 137 keep state
> pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 138 keep state
> pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 139 keep state
> 
> Where 192.168.0.0 is your network and 192.168.0.1 is your server IP.

Ummm. I think you'll want to allow incoming traffic across these ports 
for intranet Samba fileshare operations:

port 139 tcp
port 138 upd
port 137 upd

Michael Chinn
> 
> Cheers,
> 
> Bill Sawyer
> Information Systems
> Six Flags St. Louis
> (636) 938-5300 x. 231
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?40CCB631.2050803>