From owner-freebsd-questions@FreeBSD.ORG  Mon Jan  3 14:12:20 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AE1F716A4CE
	for <freebsd-questions@freebsd.org>;
	Mon,  3 Jan 2005 14:12:20 +0000 (GMT)
Received: from lp1001.snu.ac.kr (lp1001.snu.ac.kr [147.46.70.11])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2450043D45
	for <freebsd-questions@freebsd.org>;
	Mon,  3 Jan 2005 14:12:20 +0000 (GMT)
	(envelope-from spamrefuse@yahoo.com)
Received: from [IPv6:::1] (localhost [127.0.0.1])
	(authenticated (0 bits))
	by lp1001.snu.ac.kr (8.13.1/8.11.6) with ESMTP id j03EA2HS027303
	for <freebsd-questions@freebsd.org>; Mon, 3 Jan 2005 23:10:02 +0900
Message-ID: <41D952C2.1040708@yahoo.com>
Date: Mon, 03 Jan 2005 23:12:18 +0900
From: Rob <spamrefuse@yahoo.com>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.5) Gecko/20041226
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: FreeBSD <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Samba on a router; doesn't work for outer network.
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Jan 2005 14:12:20 -0000


Hi,

I have tried to configure Samba on a FreeBSD (5.3) router & NAT.

I want to have a single accessible directory with a password,
that can be accessed from the inner network (10.0.0.X) as well
as from the outer network (outer network = Windows PCs that use
the same external router as the FreeBSD PC).

It works for the inner network, but not for the outer network
(see below for network scheme). All Windows PCs are XP.

For testing this, I use an 'open' firewall. I should tighten the
firewall as soon as this is working.

The /usr/local/etc/smb.conf (configured with swat) is as follows:

#------------ smb.conf ----------------------------------
[global]
         workgroup = CISR
         netbios name = SURFACE
         server string = FreeBSD Samba Server
         passdb backend = tdbsam
         log file = /var/log/samba/log.%m
         max log size = 50
         dns proxy = No
         ldap ssl = no

[share]
         comment = Shared stuff
         path = /home/share
         invalid users = @wheel
         valid users = share
         read only = No
         force create mode = 0700
         force security mode = 0700
#---------------------------------------------------------


The network scheme is as follows:

                        |IP on outer network
                        |
                      |---------|
                      | FreeBSD |
  |------------|      | Router  |
  |   Switch   |      |---------|
  |------------|        |10.0.0.1
    |  |  |  |          |
    |  |  |  \----------/
    |  |  |
    |  |  10.0.0.2
    |  |
    |  10.0.0.3
    |
    10.0.0.4


What could be blocking Samba on the outer network?
What communication is essential for Samba to work on the outer network?
What tests can I do on the router to find out what's going wrong?

Thanks so much,
Rob.