From 4601611b7385f20514a8ef8a14cb004aa593f2ee Mon Sep 17 00:00:00 2001 From: teastep Date: Thu, 25 Dec 2003 17:45:30 +0000 Subject: [PATCH] Convert samba.htm to Docbook XML git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@957 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-docs/samba.htm | 186 --------------------------------------- Shorewall-docs/samba.xml | 51 +++++++++++ 2 files changed, 51 insertions(+), 186 deletions(-) delete mode 100644 Shorewall-docs/samba.htm create mode 100644 Shorewall-docs/samba.xml diff --git a/Shorewall-docs/samba.htm b/Shorewall-docs/samba.htm deleted file mode 100644 index 3f758fb17..000000000 --- a/Shorewall-docs/samba.htm +++ /dev/null @@ -1,186 +0,0 @@ - - - - - - - - Samba - - -

Samba/SMB
-

-

If you wish to run Samba on your firewall and access shares between -the firewall and local hosts, you need the following rules:

-

/etc/shorewall/rules:

-
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
ACTIONSOURCEDEST PROTODEST
-PORT(S)
SOURCE
-PORT(S)
ORIGINAL
-DEST
ACCEPTfwlocudp137:139  
ACCEPTfwloctcp137,139,445  
ACCEPTfwlocudp1024:137 
ACCEPTlocfwudp137:139  
ACCEPTlocfwtcp137,139,445  
ACCEPTlocfwudp1024:137 
-
-

To pass traffic SMB/Samba traffic between zones Z1 and Z2:

-

/etc/shorewall/rules:

-
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
ACTIONSOURCEDEST PROTODEST
-PORT(S)
SOURCE
-PORT(S)
ORIGINAL
-DEST
ACCEPTZ1
-
Z2
-
udp137:139  
ACCEPTZ1
-
Z2
-
tcp137,139,445  
ACCEPTZ1
-
Z2
-
udp1024:137 
ACCEPTZ2
-
Z1
-
udp137:139  
ACCEPTZ2
-
Z1
-
tcp137,139,445  
ACCEPTZ2
-
Z1
-
udp1024:137 
-
-
-To make network browsing ("Network Neighborhood") work properly between -Z1 and Z2 requires a Windows Domain Controller and/or a WINS server. I -run Samba on my firewall to handle browsing between two zones connected -to my firewall. Details are here.
-

Last modified 10/22/2002 - Tom -Eastep

-

Copyright2002 Thomas M. Eastep.

-
- - diff --git a/Shorewall-docs/samba.xml b/Shorewall-docs/samba.xml new file mode 100644 index 000000000..7944662e5 --- /dev/null +++ b/Shorewall-docs/samba.xml @@ -0,0 +1,51 @@ + + +
+ + Samba/SMB + + + + Tom + + Eastep + + + + 2002-10-22 + + + 2002 + + Thomas M. Eastep + + + + Permission is granted to copy, distribute and/or modify this + document under the terms of the GNU Free Documentation License, Version + 1.2 or any later version published by the Free Software Foundation; with + no Invariant Sections, with no Front-Cover, and with no Back-Cover + Texts. A copy of the license is included in the section entitled "GNU Free Documentation License". + + + + If you wish to run Samba on your firewall and access shares between + the firewall and local hosts, you need the following rules: + + /etc/shorewall/rules:ACTIONSOURCEDESTINATIONPROTOCOLPORT(S)SOURCE + PORT(S)ORIGINAL DESTACCEPTfwlocudp137:139ACCEPTfwloctcp137,139,445ACCEPTfwlocudp1024:137ACCEPTlocfwudp137:139ACCEPTlocfwtcp137,139,445ACCEPTlocfwudp1024:137 + + To pass traffic SMB/Samba traffic between zones Z1 and Z2: + + /etc/shorewall/rules:ACTIONSOURCEDESTINATIONPROTOCOLPORT(S)SOURCE + PORT(S)ORIGINAL DESTACCEPTZ1Z2udp137:139ACCEPTZ1Z2tcp137,139,445ACCEPTZ1Z2udp1024:137ACCEPTZ2Z1udp137:139ACCEPTZ2Z1tcp137,139,445ACCEPTZ2Z1udp1024:137 + + To make network browsing ("Network Neighborhood") work + properly between Z1 and Z2 requires a Windows Domain Controller and/or a + WINS server. I run Samba on my firewall to handle browsing between two zones + connected to my firewall. Details are here. +
\ No newline at end of file