|
Home > Archive > Red Hat Security > May 2004 > Samba - IPtables
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
|
| HI all,
I hope this is the right group to post this
I am running a win2k sp2, linux redhat7.x and samba 2.2.x and iptables.
I believe that I have my smb.conf file set up correctly, infact I have the
min, a homes section. In my iptables I have opened ports 137-139 tcp and
udp. Encrypted passwords on both sides. But trying to connect to the linux
box gives me a 53 error path was not found.
I stop iptables, and restart samba and viola i can connect. start iptables
and all works fine. reboot the pc and bang cant connect get the same error.
Try the above provedure, but this time, when I stop iptables I don;t try and
connect. But still get the error message.
Seems like I can get it to work if I stop iptables, make a connection then
restart iptables abd the firewall and all works well until I reboot my PC.
Does any 1 have any ideas.
Thanks
Robert
| |
| Alexander Dalloz 2004-03-01, 9:34 am |
| On Mon, 01 Mar 2004 15:13:39 +0200 rb wrote:
> HI all,
>
> I hope this is the right group to post this
>
> I am running a win2k sp2, linux redhat7.x and samba 2.2.x and iptables.
> I believe that I have my smb.conf file set up correctly, infact I have the
> min, a homes section. In my iptables I have opened ports 137-139 tcp and
> udp. Encrypted passwords on both sides. But trying to connect to the linux
> box gives me a 53 error path was not found.
> I stop iptables, and restart samba and viola i can connect. start iptables
> and all works fine. reboot the pc and bang cant connect get the same error.
> Try the above provedure, but this time, when I stop iptables I don;t try and
> connect. But still get the error message.
> Seems like I can get it to work if I stop iptables, make a connection then
> restart iptables abd the firewall and all works well until I reboot my PC.
>
> Does any 1 have any ideas.
>
> Thanks
> Robert
Check and understand your iptables rule settings!
Alexander
--
Alexander Dalloz | Enger, Germany
PGP key valid: made 13.07.1999
PGP fingerprint: 2307 88FD 2D41 038E 7416 14CD E197 6E88 ED69 5653
| |
| Michael 2004-05-22, 10:28 pm |
| rb wrote:
> HI all,
>
> I hope this is the right group to post this
>
> I am running a win2k sp2, linux redhat7.x and samba 2.2.x and iptables.
> I believe that I have my smb.conf file set up correctly, infact I have the
> min, a homes section. In my iptables I have opened ports 137-139 tcp and
> udp. Encrypted passwords on both sides. But trying to connect to the linux
> box gives me a 53 error path was not found.
> I stop iptables, and restart samba and viola i can connect. start iptables
> and all works fine. reboot the pc and bang cant connect get the same error.
> Try the above provedure, but this time, when I stop iptables I don;t try and
> connect. But still get the error message.
> Seems like I can get it to work if I stop iptables, make a connection then
> restart iptables abd the firewall and all works well until I reboot my PC.
I think Netbios uses port 135 and new versions of windows use port 445
Try opening those two ports...
> Does any 1 have any ideas.
>
> Thanks
> Robert
>
>
>
>
| |
| chris@nospam.com 2004-05-22, 10:28 pm |
| On Mon, 1 Mar 2004 15:13:39 +0200, "rb" <me@u.com> wrote:
>HI all,
>
>I hope this is the right group to post this
>
>I am running a win2k sp2, linux redhat7.x and samba 2.2.x and iptables.
>I believe that I have my smb.conf file set up correctly, infact I have the
>min, a homes section. In my iptables I have opened ports 137-139 tcp and
>udp. Encrypted passwords on both sides. But trying to connect to the linux
>box gives me a 53 error path was not found.
>I stop iptables, and restart samba and viola i can connect. start iptables
>and all works fine. reboot the pc and bang cant connect get the same error.
>Try the above provedure, but this time, when I stop iptables I don;t try and
>connect. But still get the error message.
>Seems like I can get it to work if I stop iptables, make a connection then
>restart iptables abd the firewall and all works well until I reboot my PC.
>
>Does any 1 have any ideas.
>
>Thanks
>Robert
The error 53 means the W2K box can't resolve the address. Does using
the ip address work? Try adding an entry to the
c:\windows\system32\drivers\etc\lmhosts and hosts files.
I think you also need to open 135 and 445. You could try running a
packet sniffer such as ethereal to confim what ports are needed.
Also, I strongly recommend getting that W2K box updated as SP2 is
ancient and full of security holes.
-Chris
|
|
|
|
|