From: Sascha Bieler <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [Samba] please help me. Date: Mon, 31 May 2004 23:02:33 +0200
I just wonder why port 445 is missing there...
Greetings
Sascha
here is the new script but the same problem is with this script too that if i enable transparent redirection it starts taking about 4 minutes and if i remove the rule for port 80 transparent redirection then it starts working
here is the script
----------------------------------------------------------------------------------------------------------------------------------
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -F iptables -t nat -F
modprobe ip_nat_ftp
iptables -P INPUT DROP iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT iptables -A INPUT -i eth0 -p tcp --dport 53 -j ACCEPT iptables -A INPUT -i eth0 -p udp --dport 53 -j ACCEPT iptables -A INPUT -i eth0 -p udp --dport 137 -j ACCEPT iptables -A INPUT -i eth0 -p tcp --dport 137 -j ACCEPT iptables -A INPUT -i eth0 -p udp --dport 138 -j ACCEPT iptables -A INPUT -i eth0 -p tcp --dport 138 -j ACCEPT iptables -A INPUT -i eth0 -p udp --dport 139 -j ACCEPT iptables -A INPUT -i eth0 -p tcp --dport 139 -j ACCEPT iptables -A INPUT -i eth0 -p tcp --dport 445 -j ACCEPT iptables -A INPUT -i eth0 -p udp --dport 445 -j ACCEPT #iptables -A INPUT -j LOG
#iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080 #iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port 8080
iptables -P FORWARD DROP iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 21 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 5000 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 5001 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 5005 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 5050 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 7000 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE ----------------------------------------------------------------------------------------------------------------------------------
Regards Azeem
_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
