Samba

If you wish to run Samba on your firewall and access shares between the firewall and local hosts, you need the following rules:

/etc/shorewall/rules:

ACTION SOURCE DEST PROTO DEST
PORT(S) SOURCE
PORT(S) ORIGINAL
DEST

ACCEPT fw loc udp 137:139

ACCEPT fw loc tcp 137,139,445

ACCEPT fw loc udp 1024: 137

ACCEPT loc fw udp 137:139

ACCEPT loc fw tcp 137,139,445

ACCEPT loc fw udp 1024: 137

Last modified 8/17/2002 - Tom Eastep

ACTION	SOURCE	DEST	PROTO	DEST PORT(S)	SOURCE PORT(S)	ORIGINAL DEST
ACCEPT	fw	loc	udp	137:139
ACCEPT	fw	loc	tcp	137,139,445
ACCEPT	fw	loc	udp	1024:	137
ACCEPT	loc	fw	udp	137:139
ACCEPT	loc	fw	tcp	137,139,445
ACCEPT	loc	fw	udp	1024:	137