Jump to content


Photo

Configure shorewall to allow browsing of LAN shares


  • Please log in to reply
1 reply to this topic

#1 Whiskers

Whiskers

    journeyman

  • Members
  • 99 posts

Posted 31 October 2004 - 07:09 AM

Heres my setup,
Mandrake 10 official with the firewall installed, in the settings it says, allow the internet to connect to which services, i selected none. I dont have samba installed, i use the kernels built in samba client to see shared folders and computers over our home LAN. I could access and see other computers without a problem before I enabled Mandrakes's firewall. How do I configure this shorewall firewall to allow me to see the other computers on my LAN again?

#2 blackpage

blackpage

    member

  • Members
  • 120 posts

Posted 31 October 2004 - 02:05 PM

Gidday Whiskers

Since I prefer to set up firewall-rules by poking the necessary stuff into iptables, I'm not too sure how shorewall handles things. But it should be generally along the same patterns. Here's what to check ...

Option 1: Unrestricted LAN-access
If you don't have security concerns for you rlinux box you might as well allow the complete traffic to/from your box by generally assigning a "PERMIT" to the LAN-IP-range. Those are typically in the "192.164.0.0"- the "10.0.0.0"-ranges. Just check what IPs your boxes are assigned.

Option 2: Fine-granulated access
For this, not only the IP of the LAN-workstation you want to grant or deny access is relevant, but also the ports. For normal LAN operations you should at least allow traffic on the "typical Microsnot"-ports, as there are: 137, 139 and 445 (all TCP + UDP).

Regarding whether or not the above ports are used as "DESTINATION" or "SOURCE"-ports it may also be necessary to grant access on all ports higher than "1024".

For more info you might want to check this link
Shorewall-Samba quick-info

Hope that helps




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

IPB Skin By Virteq