Jump to content
Compatible Support Forums
Sign in to follow this  

Configure shorewall to allow browsing of LAN shares

Recommended Posts

Heres my setup,

Mandrake 10 official with the firewall installed, in the settings it says, allow the internet to connect to which services, i selected none. I dont have samba installed, i use the kernels built in samba client to see shared folders and computers over our home LAN. I could access and see other computers without a problem before I enabled Mandrakes's firewall. How do I configure this shorewall firewall to allow me to see the other computers on my LAN again?

Share this post

Link to post
Share on other sites

Gidday Whiskers


Since I prefer to set up firewall-rules by poking the necessary stuff into iptables, I'm not too sure how shorewall handles things. But it should be generally along the same patterns. Here's what to check ...


Option 1: Unrestricted LAN-access

If you don't have security concerns for you rlinux box you might as well allow the complete traffic to/from your box by generally assigning a "PERMIT" to the LAN-IP-range. Those are typically in the ""- the ""-ranges. Just check what IPs your boxes are assigned.


Option 2: Fine-granulated access

For this, not only the IP of the LAN-workstation you want to grant or deny access is relevant, but also the ports. For normal LAN operations you should at least allow traffic on the "typical Microsnot"-ports, as there are: 137, 139 and 445 (all TCP + UDP).


Regarding whether or not the above ports are used as "DESTINATION" or "SOURCE"-ports it may also be necessary to grant access on all ports higher than "1024".


For more info you might want to check this link

Shorewall-Samba quick-info


Hope that helps

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this