mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-17 03:40:53 +01:00
dbfc838988
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@789 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
187 lines
4.4 KiB
HTML
187 lines
4.4 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
<html>
|
||
<head>
|
||
<meta http-equiv="Content-Language" content="en-us">
|
||
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
|
||
<meta name="ProgId" content="FrontPage.Editor.Document">
|
||
<meta http-equiv="Content-Type"
|
||
content="text/html; charset=windows-1252">
|
||
<title>Samba</title>
|
||
</head>
|
||
<body>
|
||
<h1 style="text-align: center;">Samba/SMB<br>
|
||
</h1>
|
||
<p>If you wish to run Samba on your firewall and access shares between
|
||
the firewall and local hosts, you need the following rules:</p>
|
||
<h4>/etc/shorewall/rules:</h4>
|
||
<blockquote> <font face="Century Gothic, Arial, Helvetica"> </font>
|
||
<table border="2" cellpadding="2" style="border-collapse: collapse;">
|
||
<tbody>
|
||
<tr>
|
||
<td><b>ACTION</b></td>
|
||
<td><b>SOURCE</b></td>
|
||
<td><b>DEST</b></td>
|
||
<td><b> PROTO</b></td>
|
||
<td><b>DEST<br>
|
||
PORT(S)</b></td>
|
||
<td><b>SOURCE<br>
|
||
PORT(S)</b></td>
|
||
<td><b>ORIGINAL<br>
|
||
DEST</b></td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>fw</td>
|
||
<td>loc</td>
|
||
<td>udp</td>
|
||
<td>137:139</td>
|
||
<td> </td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>fw</td>
|
||
<td>loc</td>
|
||
<td>tcp</td>
|
||
<td>137,139,445</td>
|
||
<td> </td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>fw</td>
|
||
<td>loc</td>
|
||
<td>udp</td>
|
||
<td>1024:</td>
|
||
<td>137</td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>loc</td>
|
||
<td>fw</td>
|
||
<td>udp</td>
|
||
<td>137:139</td>
|
||
<td> </td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>loc</td>
|
||
<td>fw</td>
|
||
<td>tcp</td>
|
||
<td>137,139,445</td>
|
||
<td> </td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>loc</td>
|
||
<td>fw</td>
|
||
<td>udp</td>
|
||
<td>1024:</td>
|
||
<td>137</td>
|
||
<td> </td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</blockquote>
|
||
<p>To pass traffic SMB/Samba traffic between zones Z1 and Z2:</p>
|
||
<h4>/etc/shorewall/rules:</h4>
|
||
<blockquote> <font face="Century Gothic, Arial, Helvetica"> </font>
|
||
<table border="2" cellpadding="2" style="border-collapse: collapse;">
|
||
<tbody>
|
||
<tr>
|
||
<td><b>ACTION</b></td>
|
||
<td><b>SOURCE</b></td>
|
||
<td><b>DEST</b></td>
|
||
<td><b> PROTO</b></td>
|
||
<td><b>DEST<br>
|
||
PORT(S)</b></td>
|
||
<td><b>SOURCE<br>
|
||
PORT(S)</b></td>
|
||
<td><b>ORIGINAL<br>
|
||
DEST</b></td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>Z1<br>
|
||
</td>
|
||
<td>Z2<br>
|
||
</td>
|
||
<td>udp</td>
|
||
<td>137:139</td>
|
||
<td> </td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>Z1<br>
|
||
</td>
|
||
<td>Z2<br>
|
||
</td>
|
||
<td>tcp</td>
|
||
<td>137,139,445</td>
|
||
<td> </td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>Z1<br>
|
||
</td>
|
||
<td>Z2<br>
|
||
</td>
|
||
<td>udp</td>
|
||
<td>1024:</td>
|
||
<td>137</td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>Z2<br>
|
||
</td>
|
||
<td>Z1<br>
|
||
</td>
|
||
<td>udp</td>
|
||
<td>137:139</td>
|
||
<td> </td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>Z2<br>
|
||
</td>
|
||
<td>Z1<br>
|
||
</td>
|
||
<td>tcp</td>
|
||
<td>137,139,445</td>
|
||
<td> </td>
|
||
<td> </td>
|
||
</tr>
|
||
<tr>
|
||
<td>ACCEPT</td>
|
||
<td>Z2<br>
|
||
</td>
|
||
<td>Z1<br>
|
||
</td>
|
||
<td>udp</td>
|
||
<td>1024:</td>
|
||
<td>137</td>
|
||
<td> </td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</blockquote>
|
||
<br>
|
||
To make network browsing ("Network Neighborhood") work properly between
|
||
Z1 and Z2 requires a Windows Domain Controller and/or a WINS server. I
|
||
run Samba on my firewall to handle browsing between two zones connected
|
||
to my firewall. Details are <a href="myfiles.htm">here</a>.<br>
|
||
<p><font size="2">Last modified 10/22/2002 - <a href="support.htm">Tom
|
||
Eastep</a></font></p>
|
||
<p><font face="Trebuchet MS"><a href="copyright.htm"> <font size="2">Copyright</font>
|
||
<EFBFBD> <font size="2">2002 Thomas M. Eastep.</font></a></font></p>
|
||
<br>
|
||
</body>
|
||
</html>
|