Re: ipchains rules for netbios/samba connectivity

["Carey F. Cox" <cfcox coes latech edu>]

On Fri, 31 Aug 2001, Allen Belk wrote:

> Gurus,
>     I am trying to allow SMB connectivity to my RH6.2 machine in order to
> back up some Windows PCs around the office.  I have ipchains set up to deny
> everything except what I explicitly allow.  Now I want to add rules to allow
> SMB/Windows/Samba/Netbios, client and server.  I am unsure of all of the
> broadcast stuff.  Could someone please send examples of or links to rules
> that will allow these services.
>
> Thanks,
>
> Allen

Add the following lines to /etc/sysconfig/ipchains and restart ipchains.

-A input -s 0/0 -d 0/0 137:139 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 161 -p tcp -y -j ACCEPT

Be careful as this opens both directions, incoming and outgoing,
to the netbios protocols (137:139) and snmp protocols (161).

Carey

-- 
 ======================================================================
<>  Carey F. Cox, PhD          |  PHONE: (318) 257-3770               <>
<>  Assistant Professor        |  FAX:   (318) 257-2306               <>
<>  Dept. of Mech. Eng.        |  EMAIL: cfcox coes latech edu        <>
<>  Louisiana Tech University  |  WEB:   http://www.latech.edu/~cfcox <>
 ======================================================================