From owner-freebsd-questions@FreeBSD.ORG Sun Jun 13 02:57:30 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D13CD16A4CE for ; Sun, 13 Jun 2004 02:57:30 +0000 (GMT) Received: from GWIA01.sftp.com (mail.sftp.com [65.243.46.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 442F943D2F for ; Sun, 13 Jun 2004 02:57:30 +0000 (GMT) (envelope-from bSawyer@sftp.com) Received: from mail.sftp.com ([192.10.2.3]) by GWIA01.sftp.com; Sat, 12 Jun 2004 22:03:14 -0500 Received: from SF_Mail-Message_Server by mail.sftp.com with Novell_GroupWise; Sat, 12 Jun 2004 21:55:16 -0500 Message-Id: X-Mailer: Novell GroupWise 5.5.5 Date: Sat, 12 Jun 2004 21:55:11 -0500 From: "Bill Sawyer" To: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Subject: Re: ipfilter allowing samba X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Jun 2004 02:57:30 -0000 Hey Dave, You need to allow exceptions in ipfilter for ports 137 to 139. The = following rules should work: pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32 port = =3D 137 keep state pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32 port = =3D 138 keep state pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32 port = =3D 139 keep state Where 192.168.0.0 is your network and 192.168.0.1 is your server IP. Cheers, Bill Sawyer Information Systems Six Flags St. Louis (636) 938-5300 x. 231