[es] - Samba i iptables

amon77
BGD

Član broj: 157582
Poruke: 23
93.86.153.*

Profil

^{14.02.2009. u 10:44 - pre 184 meseci}

Imam jedan problem sa pristupanjem sambi u lokalnoj mrezi sa WinXP klijenta. Problem je u tome sto iako su u iptables optvoreni portovi 137,138,139 i 445 i dalje ne mogu da pristupim sambi dok u potpunosti ne zaustavim service iptables. Kada zaustavim servis sve naravno radi kako treba, a radi i ako pokrenem servis ako sam pre toga barem jedanput pristupio sambi sa klijentske masine...

Ovo je izlaz za iptables --list

Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp any
ACCEPT ipv6-crypt-- anywhere anywhere
ACCEPT ipv6-auth-- anywhere anywhere
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:5353
ACCEPT udp -- anywhere anywhere udp dpt:ipp
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:netbios-ssn
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:netbios-ns
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:netbios-dgm
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:microsoft-ds
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:135
ACCEPT udp -- anywhere anywhere state NEW udp dpt:135
ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-dgm
ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-ssn
ACCEPT udp -- anywhere anywhere state NEW udp dpt:microsoft-ds
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

Hvala unapred!!!

Long you live and high you fly
And smiles you'll give and tears you'll cry
And all you touch and all you see
Is all your life will ever be.

Odgovor na temu

nemysis

Član broj: 2273
Poruke: 729
*.152.adsl.wplus.ru.

Jabber: nemysis)ata(deshalbfrei)dota(org
Sajt: https://duckduckgo.com

+4 Profil

Re: Samba i iptables

^{15.02.2009. u 10:33 - pre 184 meseci}

Kad pokušavaš da uradiš nešto a ne uspevaš uvek prvo proveri, šta se dešava u

/var/log/messages

i eventualno

/var/log/syslog-ng

direktorijumu.

Tu ti piše šta je pokušano i koji je odgovor Kernel-a bio na to.

Da li nedostaju neki Port-ovi i slično.

Očigledno ti nešto nedostaje, jer kad spustiš zaštitni zid to radi.

Znači neko pravilo u zaštitnom zidu ti nedostaje.

Proveri logove dok radiš, pa ćeš videti šta ti nedostaje.

FreeBSD[/
url]
[url=http://www.freebsd.org/doc/en/boo
ks/handbook/index.html]FreeBSD
Handbook
FreeBS
D Forumi
GhostBSD[/url
]
[url=http://www.sysresccd.org/]System
Rescue CD

Odgovor na temu