From owner-freebsd-security  Fri Apr 12  2: 1: 1 2002
Delivered-To: freebsd-security@freebsd.org
Received: from web13303.mail.yahoo.com (web13303.mail.yahoo.com [216.136.175.39])
	by hub.freebsd.org (Postfix) with SMTP id B74B737B41A
	for <security@freebsd.org>; Fri, 12 Apr 2002 02:00:58 -0700 (PDT)
Message-ID: <20020412090058.65763.qmail@web13303.mail.yahoo.com>
Received: from [193.174.9.99] by web13303.mail.yahoo.com via HTTP; Fri, 12 Apr 2002 11:00:58 CEST
Date: Fri, 12 Apr 2002 11:00:58 +0200 (CEST)
From: =?iso-8859-1?q?m=20p?= <sumirati@yahoo.de>
Subject: Re: ipfw and samba
To: Mario Pranjic <mario.pranjic@irb.hr>
Cc: security@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> Mario Pranjic wrote:
> 
> Hi!
> 
> Does anyone knows what should be opened in order to samba works proprely.
> I tried opening the ports 137-139 (tcp and udp) but it still doesn't
> work.
> 
> smbclient -L works, though, but I can't access the host from windows.
> 
> Anybody knowns what might be the problem?
> 
> Thanks!
> 
> Mario Pranjic, dipl.ing.
> sistem administrator
> Knjiznica, Institut Rudjer Boskovic
> -------------------------------------
> e-mail: mario.pranjic@irb.hr
> ICQ: 72059629
> tel: +385 1 45 60 954 (interni: 1293)
> -------------------------------------
> 

Hi Mario,

are you allowing only the host to this ports - or the broadcast address also?

Add a test rule as last rule before the rule number 65535 which should read as:
ipfw add 65500 deny log all from any to any

Then you should see in /var/log/security with which address access for your
windows machine is blocked.

For me worked to allow the hosts + the broadcast address to access my machine.

If that helps not, please send your ipfw-config and network-config to the list.
We can then help you better.

Marc


__________________________________________________________________

Gesendet von Yahoo! Mail - http://mail.yahoo.de
Sie brauchen mehr Speicher für Ihre E-Mails? - http://premiummail.yahoo.de

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message