From owner-freebsd-questions@FreeBSD.ORG  Sun Jun 13 20:14:15 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F25C316A4CE
	for <freebsd-questions@freebsd.org>;
	Sun, 13 Jun 2004 20:14:15 +0000 (GMT)
Received: from smtp813.mail.sc5.yahoo.com (smtp813.mail.sc5.yahoo.com
	[66.163.170.83])	by mx1.FreeBSD.org (Postfix) with SMTP id ADFE143D4C
	for <freebsd-questions@freebsd.org>;
	Sun, 13 Jun 2004 20:14:15 +0000 (GMT)
	(envelope-from addymin@pacbell.net)
Received: from unknown (HELO pacbell.net) (m?chinn@pacbell.net@63.203.204.73
	with plain)
	by smtp813.mail.sc5.yahoo.com with SMTP; 13 Jun 2004 20:14:15 -0000
Message-ID: <40CCB631.2050803@pacbell.net>
Date: Sun, 13 Jun 2004 13:16:49 -0700
From: Mike <addymin@pacbell.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
	rv:1.6) Gecko/20040113
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Bill Sawyer <bSawyer@sftp.com>
References: <s0cb7bc4.027@mail.sftp.com>
In-Reply-To: <s0cb7bc4.027@mail.sftp.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: freebsd-questions@freebsd.org
Subject: Re: ipfilter allowing samba
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: addymin@pacbell.net
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 13 Jun 2004 20:14:16 -0000

Bill Sawyer wrote:
> Hey Dave,
> 
> You need to allow exceptions in ipfilter for ports 137 to 139.  The following rules should work:
> 
> pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 137 keep state
> pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 138 keep state
> pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 139 keep state
> 
> Where 192.168.0.0 is your network and 192.168.0.1 is your server IP.

Ummm. I think you'll want to allow incoming traffic across these ports 
for intranet Samba fileshare operations:

port 139 tcp
port 138 upd
port 137 upd

Michael Chinn
> 
> Cheers,
> 
> Bill Sawyer
> Information Systems
> Six Flags St. Louis
> (636) 938-5300 x. 231
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>