samba/win95 network over ip-masquerading
I'm running Debian/Linux potato kernel 2.2.10 with Samba 2.0.4b and I'm
trying to setup a Linux box to masquerade and allow browsing across the
Linux box. Currently, IP Masquerading is working and I'm using the default
Debian auto-configuration. More specifically, I want the machines on the
local network to see and be able to access the machines on the outside
network and vice-versa. And, if possible I'd like the Linux box to only be
seen/accessible by the local network (not as important).
Here's the situation: There are 3 win95 machines behind the Linux box and a
WINS server on the outside, which I'm not in control of. Right now the
local network is 192.168.1.x on eth0 and the outside is 192.168.100.x on
eth1 (which will be changed to a non-private IP in the future).
I've tried setting up the Linux box as a WINS server and having the local
machines point to it, but then there is no link to the outside machines. If
the local machines point to the outside WINS server, nothing seems to work.
If I telnet into the Linux box, smbclient -L {machine} is able to locate the
clients without any problems or help from DNS, yet the machines don't report
a browse list containing machines from the other network.
---
Just recently I changed the firewall rules so the default policy is ACCEPT
for input, output, and forward and I deleted the DENY rule from the input
and output chains just to make things a little easier. Now, the local
machines are set to the WINS server on the outside network and are able to
browse and connect to those machines + the inside machines. So, one
direction is working. Now, how can I get it to work the other way?
I think it should be possible because I think the WINS server stores the IP
and port of the clients machines, thus is the Linux ip masq box manipulated
the WINS connections from the inside to the outside network so that the
machine was the Linux box outside IP and changed the ports, everything
should work fine. --- do I need more MASQ/firewall rules?
What can I do?
Thanks,
-Paul
Re: samba/win95
On Wed, 11 Feb 1998, Antonio Doldo wrote: In the windows machines usually are used two protocols: IPX/SPX and NetBEUI for connecting the MS network, while for samba is request the stacks TCP/IP. I don't know what your talking about... win95 supports TCP/IP, so why would there be a problem? In the Linux box must be installed the TCP/IP (naturally), but when you login in a box with the name 'paul' and try /home/paul/$ smbclient -L my_host samba identify 'paul' and the 'homes' share is the home of paul (/home/paul) therefore if you use a login_name in a windows pc as 'paul' you can be access to the listing of shares resources, otherwise no. whith security=share instead the community can view (only VIEW) the resources. hmm... are you saying that when in security=user mode, samba does not assume that the user's home directory share is owned by that user? When I try using the \\server\share%user syntax, I get the same results. I'm clueless, none of the FAQs cover this type of thing. Is there any way I can force the IPC$ share to be public - so browsing works? -Paul -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: samba/win95
At 14.56 10/02/98 -0500, Paul Miller wrote: On Tue, 10 Feb 1998, Antonio Doldo wrote: At 22.42 07/02/98 -0500, Paul Miller wrote: When I set samba to USER mode, it doesn't accept passwords from windows machines.. It works from linux machines.. I'm using encrypted password and the lastest samba release. I believe that the problem is simply in the login in win95 network (netbeui, ipx/spx, TCP/IP) because the line 'security=user' in the smb.conf presume that the account on the server samba must be identical on both machines. I don't think the protocol changes in the security setting is changed. My Linux box currently doesn't even support ipx.. and I don't know about netbeui... In the windows machines usually are used two protocols: IPX/SPX and NetBEUI for connecting the MS network, while for samba is request the stacks TCP/IP. In the Linux box must be installed the TCP/IP (naturally), but when you login in a box with the name 'paul' and try /home/paul/$ smbclient -L my_host samba identify 'paul' and the 'homes' share is the home of paul (/home/paul) therefore if you use a login_name in a windows pc as 'paul' you can be access to the listing of shares resources, otherwise no. whith security=share instead the community can view (only VIEW) the resources. If you want limitate the access from other networks can use allow hosts = 193.xxx. 141.xxx. perhaps there is another possibility: you can use the username.map in the samba config What is username.map? Is it where samba checks the password against a list of valid users? That doesn't sound too secure. I non use the username.map, but I believe is a file that contain the name conversions between PC and U*ix -Paul I hope is satisfactory Antonio -- Antonio Doldo Istituto Superiore di Sanita' Laboratorio di Chimica del Farmaco Viale Regina Elena, 299 I-00161 ROME phone +39 6 49.90.26.82 mailto:[EMAIL PROTECTED] -- -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: samba/win95
At 22.42 07/02/98 -0500, Paul Miller wrote: When I set samba to USER mode, it doesn't accept passwords from windows machines.. It works from linux machines.. I'm using encrypted password and the lastest samba release. I believe that the problem is simply in the login in win95 network (netbeui, ipx/spx, TCP/IP) because the line 'security=user' in the smb.conf presume that the account on the server samba must be identical on both machines. perhaps there is another possibility: you can use the username.map in the samba config Another problem is that the $IPC resource isn't public, so windows computer won't browse the shares.. Everything works in SHARE mode; unfortunately, I need to use user mode. Anyone have this problem? How can I fix this? Thanks --- Paul Miller [EMAIL PROTECTED], finger for public PGP key sorry for imperfect english, ciao Antonio -- Antonio Doldo Istituto Superiore di Sanita' Laboratorio di Chimica del Farmaco Viale Regina Elena, 299 I-00161 ROME phone +39 6 49.90.26.82 mailto:[EMAIL PROTECTED] -- -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: samba/win95
On Tue, 10 Feb 1998, Antonio Doldo wrote: At 22.42 07/02/98 -0500, Paul Miller wrote: When I set samba to USER mode, it doesn't accept passwords from windows machines.. It works from linux machines.. I'm using encrypted password and the lastest samba release. I believe that the problem is simply in the login in win95 network (netbeui, ipx/spx, TCP/IP) because the line 'security=user' in the smb.conf presume that the account on the server samba must be identical on both machines. I don't think the protocol changes in the security setting is changed. My Linux box currently doesn't even support ipx.. and I don't know about netbeui... perhaps there is another possibility: you can use the username.map in the samba config What is username.map? Is it where samba checks the password against a list of valid users? That doesn't sound too secure. -Paul -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
samba/win95
When I set samba to USER mode, it doesn't accept passwords from windows machines.. It works from linux machines.. I'm using encrypted password and the lastest samba release. Another problem is that the $IPC resource isn't public, so windows computer won't browse the shares.. Everything works in SHARE mode; unfortunately, I need to use user mode. Anyone have this problem? How can I fix this? Thanks --- Paul Miller [EMAIL PROTECTED], finger for public PGP key -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Samba/Win95 \\server\share%user doesn't work
I can't get the \\server\share%user syntex to work.. It'll just log on as the public user w/o asking for a password. Anyone have this problem? -Paul -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
