You need to open TCP and UDP ports 137-139 on the internal interface of the
firewall.  I would also use the smb.conf options for increased security:

hosts deny = ALL
hosts allow = 192.168.1.
interfaces = 192.168.1.1/24
bind interfaces only = yes

Assuming of course the LAN is on the 192.168.1.0/24 network and that the internal IP
of your firewall is 192.168.1.1/24.  Those options go in the [global] section of
Samba.  That way, even if someone was able to bypass the iptable rules, they
wouldn't be able to connect to Samba because it would only listen on the internal
interface.

You can also use the smb.conf options

netbios name = <name of Samba server>

to override your DNS hostname if you don't want machines to be accessing your Samba
server through \\hxx-xxx-xx-xx\share name.  This is also in the [global] section.

If you don't want your Linux server to set it's hostname to what Shaw's DHCP servers
give it then check what parameters dhcpcd is using, mainly the -H or -D options
which force dhcpcd to set the hostname and domain name respectively.  I'm not sure
what the options for pump would be, I haven't used pump in ages :)

Hope this helps.



Emin Kondapalli ([EMAIL PROTECTED]) wrote*:
>
>Hi all,
>
>I am trying to setup a printer on the machine that is my firewall (to
>Shaw) too. This machine is running iptables and I am trying to install a
>printer so that I can share/access from another linux box.
>
>Is this a feasible setup? i.e. having firewall and networked printer on
>the same machine. Because, host name of this machine is set when I
>connect to cable modem. Basically, the host name looks something like
>this -- hxx-xxx-xx-xx. Where xx are the digits from the IP address
>obtained thru DHCP from Shaw.
>
>Once I succeed, I intend to have Samba. What are the potential problems
>(when Samba is installed)?
>
>All help is appreciated.
>
>

--
Trevor Lauder

--- Home ---
WWW: http://www.thelauders.net
E-Mail: [EMAIL PROTECTED]

--- Work ---
LAN Solutions
Manager of Linux Solutions
WWW: http://www.lansolutions.ab.ca
E-Mail: [EMAIL PROTECTED]


Reply via email to