Gidday Whiskers
Since I prefer to set up firewall-rules by poking the necessary stuff into iptables, I'm not too sure how shorewall handles things. But it should be generally along the same patterns. Here's what to check ...
Option 1: Unrestricted LAN-accessIf you don't have security concerns for you rlinux box you might as well allow the complete traffic to/from your box by generally assigning a "PERMIT" to the LAN-IP-range. Those are typically in the "192.164.0.0"- the "10.0.0.0"-ranges. Just check what IPs your boxes are assigned.
Option 2: Fine-granulated accessFor this, not only the IP of the LAN-workstation you want to grant or deny access is relevant, but also the ports. For normal LAN operations you should at least allow traffic on the "typical Microsnot"-ports, as there are: 137, 139 and 445 (all TCP + UDP).
Regarding whether or not the above ports are used as "DESTINATION" or "SOURCE"-ports it may also be necessary to grant access on all ports higher than "1024".
For more info you might want to check this link
Shorewall-Samba quick-infoHope that helps