[es] - Samba 3.x and suse 9.2 firewall2

apolon10

Član broj: 16765
Poruke: 105
*.beotel.net.

Profil

^{25.01.2005. u 12:11}

Da li je neko upoznat sa problemom Samba servera pod suse 9.2 firewall-om. Dok je firewall iskljucen samba funkcionise odlicno na winXP ali pod firewall-om ne mogu da pristupim share-ovanim folderima na SuSE-u.
firewall2.conf>
definisao sam portove u FW_SERVICES_EXT_TCP 137:139 145
isto i u FW_SERVICES_INT

da li neko imao sl. problema

^{25.01.2005. u 12:11}

Jbyn4e

Član broj: 422
Poruke: 5524
*.sbb.co.yu.

Profil

Re: Samba 3.x and suse 9.2 firewall2

^{25.01.2005. u 13:32}

Probaj sa
FW_SERVICES_INT_TCP 137:139 443 445 1024:65535
(ne 145, vec 445, ali mozda ti je to typo bio?)
FW_SERVICES_INT_UDP 137:139 443 445 1024:65535
Takodje, kako ti je postavljeno
FW_PROTECT_FROM _INTERNAL?
Sta imas u FW_TRUSTED_NETS?
Da li ti je postavljeno yes kod
FW_SERVICE_SAMBA?

Kad sve ostalo zakaže, pročitaj uputstvo...

^{25.01.2005. u 13:32}

apolon10

Član broj: 16765
Poruke: 105
195.252.85.*

Profil

Re: Samba 3.x and suse 9.2 firewall2

^{25.01.2005. u 22:12}

bolje pogledajcao conf, pokusao sam sa portovima koje si rekao i nista

FW_QUICKMODE="no"
FW_DEV_EXT="eth-id-00:11:09:8d:28:3f"
FW_DEV_INT="eth-id-00:11:09:8d:28:3f"
FW_DEV_DMZ=""
FW_ROUTE="no"
FW_MASQUERADE="no"
FW_MASQ_DEV="$FW_DEV_EXT"
FW_MASQ_NETS="0/0"
FW_PROTECT_FROM_INTERNAL="no"
FW_AUTOPROTECT_SERVICES="no"
FW_SERVICES_EXT_TCP="5801 5901 80 domain 137:139 443 445 901 1024:65535 udp http https microsoft-ds netbios-dgm netbios-ns netbios-ssn rsync ssh tftp ftp 20 21 22"
FW_SERVICES_EXT_UDP="domain 137:139 443 445 1024:65535"
FW_SERVICES_EXT_IP=""
FW_SERVICES_EXT_RPC=""
FW_SERVICES_DMZ_TCP="80 samba smb moin-point"
FW_SERVICES_DMZ_UDP=""
FW_SERVICES_DMZ_IP=""
FW_SERVICES_DMZ_RPC=""
FW_SERVICES_INT_TCP="80 microsoft-ds netbios-dgm netbios-ns netbios-ssn 137:139 443 445 1024:65535"
FW_SERVICES_INT_UDP=""
FW_SERVICES_INT_IP=""
FW_SERVICES_INT_RPC=""
FW_SERVICES_DROP_EXT=""
FW_SERVICES_REJECT_EXT="0/0,tcp,113"
FW_SERVICES_QUICK_TCP=""
FW_SERVICES_QUICK_UDP=""
FW_SERVICES_QUICK_IP=""
FW_TRUSTED_NETS="169.254.1.12 169.254.1.5"
FW_ALLOW_INCOMING_HIGHPORTS_TCP=""
FW_ALLOW_INCOMING_HIGHPORTS_UDP=""
FW_FORWARD=""
FW_FORWARD_MASQ=""
FW_REDIRECT=""
FW_LOG_DROP_CRIT="yes"
FW_LOG_DROP_ALL="no"
FW_LOG_ACCEPT_CRIT="yes"
FW_LOG_ACCEPT_ALL="no"
FW_LOG_LIMIT=""
FW_LOG=""
FW_KERNEL_SECURITY="yes"
FW_ANTISPOOF="no"
FW_STOP_KEEP_ROUTING_STATE="no"
FW_ALLOW_PING_FW="yes"
FW_ALLOW_PING_DMZ="no"
FW_ALLOW_PING_EXT="no"

#-------------------------------------------------------------------------#
# #
# EXPERT OPTIONS - all others please don't change these! #
# #
#-------------------------------------------------------------------------#

FW_ALLOW_FW_TRACEROUTE="yes"
FW_ALLOW_FW_SOURCEQUENCH="yes"
FW_ALLOW_FW_BROADCAST="int"
FW_IGNORE_FW_BROADCAST="no"
FW_ALLOW_CLASS_ROUTING="no"
FW_CUSTOMRULES=""
FW_REJECT="no"
FW_HTB_TUNE_DEV=""
FW_IPv6=""
FW_IPv6_REJECT_OUTGOING="yes"
FW_IPSEC_TRUST="no"

^{25.01.2005. u 22:12}

banom
Miroslav B.
Zimbabwe

Član broj: 17897
Poruke: 197
*.ptt.yu.

Sajt: www.elitesecurity.org

Profil

Re: Samba 3.x and suse 9.2 firewall2

^{14.02.2005. u 16:51}

Meni se ovo isto desava. Ima li neko jos koju ideju?

I Autostoperski vodič kroz Galaksiju pominje alkohol. On kaže da je od svih postojećih pića najbolji pangalaktički grgolj blaster.

^{14.02.2005. u 16:51}

banom
Miroslav B.
Zimbabwe

Član broj: 17897
Poruke: 197
*.ptt.yu.

Sajt: www.elitesecurity.org

Profil

Re: Samba 3.x and suse 9.2 firewall2

^{14.02.2005. u 22:58}

Malo sam guglao i nasao resenje

meni je uspelo

U /etc/sysconfig/SuSEfirewall2 treba dodati sledece redove:

FW_SERVICES_EXT_TCP="microsoft-ds netbios-dgm netbios-ns netbios-ssn"
FW_SERVICES_EXT_UDP="netbios-dgm netbios-ns"
FW_ALLOW_FW_BROADCAST="yes"

A evo i linka

Nadam se da ce pomoci

I Autostoperski vodič kroz Galaksiju pominje alkohol. On kaže da je od svih postojećih pića najbolji pangalaktički grgolj blaster.

^{14.02.2005. u 22:58}