Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Mar 2001 11:22:40 +0100
From:      michal.kutnohorsky@asp1000.com
To:        freebsd-ipfw@FreeBSD.ORG
Subject:   ipfw rulez
Message-ID:  <381F2A6B1CC4C449B19CA48BA7A2A87B0E1CB9@server.asp1000.cz>

next in thread | raw e-mail | index | archive | help
hi,
Im newbie in ipfw/natd , im trying to set up my firewall at home.

I read natd and ipfw manual, i exactly know what i want to allow and what to
deny. 

I make rules as you can see bellow (now im just testing firewall from
internal net 192.168.0.0 xl0 for this time i dont forwarding packtes between
second interface yet...)

count ip from any to any
allow log tcp from any to any 22 in recv xl0
allow log tcp from any to any 22 out xmit xl0
allow log tcp from any to any 1024-65535 in recv xl0
allow log tcp from any to any 1024-65535 out xmit xl0
allow log tcp from any to any 80 out xmit xl0
allow log tcp from any to any 80 in recv xl0
allow tcp from any to 192.168.0.22 139 out xl0
allow tcp from any to 192.168.0.22 139 in xl0


80, 22 works ok but I cant connect to Samba server 192.168.0.22.139

Allways it writes me error message that port 139 at 192.168.0.22 cant be
open...

Can you advice me how to correct it?

Does Samba needs any icmp or UDP packets?
Samba is on xl0 - 192.168.0.22:139


Kernel configuration is IPFIREWALL_VERBOSE , IPDIVERT


Thanky you very much


michal


x--------------------------x
|-- Michal Kutnohorsky  -- |
|-- michalk@asp1000.com -- |
|-- icq 24864416        -- |
| \_/ -- dej si taky    -- |
x--------------------------x



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?381F2A6B1CC4C449B19CA48BA7A2A87B0E1CB9>