Re: ipfilter allowing samba

2004-06-13 Thread Mike
Bill Sawyer wrote:
Hey Dave,
You need to allow exceptions in ipfilter for ports 137 to 139.  The following rules 
should work:
pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 137 keep 
state
pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 138 keep 
state
pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 139 keep 
state
Where 192.168.0.0 is your network and 192.168.0.1 is your server IP.
Ummm. I think you'll want to allow incoming traffic across these ports 
for intranet Samba fileshare operations:

port 139 tcp
port 138 upd
port 137 upd
Michael Chinn
Cheers,
Bill Sawyer
Information Systems
Six Flags St. Louis
(636) 938-5300 x. 231
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfilter allowing samba

2004-06-13 Thread Bill Sawyer
Mike [EMAIL PROTECTED] wrote:


Ummm. I think you'll want to allow incoming traffic across these ports 
for intranet Samba fileshare operations:

port 139 tcp
port 138 upd
port 137 upd

My bad.  I think you're right.

Cheers,

Bill Sawyer
Information Systems
Six Flags St. Louis
(636) 938-5300 x. 231

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ipfilter allowing samba

2004-06-12 Thread dave
Hi,
Need to know how to enable ipfilter to allow samba in. I've got a box
that has two interfaces on it. I need to have ipfilter allow samba in on
ed0, am not sure how to do this without dropping the firewall, which is not
an option.
Any help appreciated. This is only from the local network, not the net.
Thanks.
Dave.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfilter allowing samba

2004-06-12 Thread Bill Sawyer
Hey Dave,

You need to allow exceptions in ipfilter for ports 137 to 139.  The following rules 
should work:

pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 137 keep 
state
pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 138 keep 
state
pass in quick on ed0 proto tcp from 192.168.0.0/16 to 192.168.0.1/32  port = 139 keep 
state

Where 192.168.0.0 is your network and 192.168.0.1 is your server IP.

Cheers,

Bill Sawyer
Information Systems
Six Flags St. Louis
(636) 938-5300 x. 231

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]