Date: Thu, 16 Nov 2006 14:04:22 -0500 From: Chris Smith <bsd782@chrissmith.org> To: freebsd-pf@freebsd.org Subject: Re: problems connecting samba shares Message-ID: <200611161404.22756.bsd782@chrissmith.org> In-Reply-To: <200611162011.21765.antik@bsd.ee> References: <56217.24.161.8.173.1159492654.squirrel@mail.poklib.org> <20061116100307.GC32666@nexus.subspacefield.org> <200611162011.21765.antik@bsd.ee>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 16 November 2006 13:11, Andrei Kolu wrote:
> pass in on rl0 proto udp from any to (rl0) port 137 keep state
Maybe you're blocking some necessary broadcast packets. Try changing your
rules to something more like:
pass in on rl0 proto udp from any to any port 137 keep state
or possibly:
pass in on rl0 proto udp from any to (rl0:network) port 137 keep state
Even better, use a macro to define the ports:
samba_ports = "{ 137:139, 445 }"
pass in on rl0 proto { tcp, udp } from any to any port $samba_ports keep state
You may want to use this in your smb.conf:
smb ports = 139
and then change the above pf macro to:
samba_ports = "{ 137:139 }"
As a note it appears that your previous log is not showing a block from "any
to rl0 port 137" but from "any port 137 to rl0", assuming the rl0 address is
192.168.2.101. So unless there is some state matching the block seems valid.
Chris
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200611161404.22756.bsd782>