Re: [CentOS] Samba and iptables - woes

2009-04-01 Thread Scott Silva
on 3-31-2009 8:26 PM Rob Kampen spake the following: > Scott Silva wrote: >> on 3-30-2009 9:19 PM Rob Kampen spake the following: >> >>> Hi folk, >>> I am trying to get iptables working on a samba server but find it is >>> blocking something that prevents the windoze clients from being able to >>

Re: [CentOS] Samba and iptables - woes

2009-04-01 Thread D Tucny
2009/4/1 Rob Kampen > Scott Silva wrote: > >> What are you attempting to achieve? Having both nics on the same subnet >> doesn't make a lot of sense to me. >> >> > Scott > Good point, I guess I'm suffering from incremental additions over the last > 4 years and no real look at the overall architec

Re: [CentOS] Samba and iptables - woes

2009-03-31 Thread Rob Kampen
Scott Silva wrote: on 3-30-2009 9:19 PM Rob Kampen spake the following: Hi folk, I am trying to get iptables working on a samba server but find it is blocking something that prevents the windoze clients from being able to access the share. here are the bits from iptables: # nmb provided

Re: [CentOS] Samba and iptables - woes

2009-03-31 Thread Rob Kampen
Rob Townley wrote: The poster suggesting a lopsided interfaces is correct. Look at incoming vs outgoing packets via ifconfig -a. Use /sbin/ip to fix it. Since the subnet is the same, u need a /sbin/ip rule. Okay, I get the issue, packet arrives on one interface but server sends it back

Re: [CentOS] Samba and iptables - woes

2009-03-31 Thread Scott Silva
on 3-30-2009 9:19 PM Rob Kampen spake the following: > Hi folk, > I am trying to get iptables working on a samba server but find it is > blocking something that prevents the windoze clients from being able to > access the share. > here are the bits from iptables: >> # nmb provided netbios-ns >> -A

Re: [CentOS] Samba and iptables - woes

2009-03-31 Thread Rob Townley
The poster suggesting a lopsided interfaces is correct. Look at incoming vs outgoing packets via ifconfig -a. Use /sbin/ip to fix it. Since the subnet is the same, u need a /sbin/ip rule. On 3/31/09, Rob Kampen wrote: > > > Craig White wrote: >> On Tue, 2009-03-31 at 00:19 -0400, Rob Kampen w

Re: [CentOS] Samba and iptables - woes

2009-03-31 Thread Rob Kampen
Spook ZA wrote: Hi. 2009/3/31 Rob Kampen : Hi folk, I am trying to get iptables working on a samba server but find it is blocking something that prevents the windoze clients from being able to access the share. here are the bits from iptables: # nmb provided netbios-ns -A RH-Firewall

Re: [CentOS] Samba and iptables - woes

2009-03-31 Thread Rob Kampen
Craig White wrote: On Tue, 2009-03-31 at 00:19 -0400, Rob Kampen wrote: Hi folk, I am trying to get iptables working on a samba server but find it is blocking something that prevents the windoze clients from being able to access the share. here are the bits from iptables: # nmb pro

Re: [CentOS] Samba and iptables - woes

2009-03-31 Thread Rob Kampen
Tom wrote: What is the subnet mask of the outside interface? 255.255.255.0 or /24 What is the subnet mask of the inside interface? 255.255.255 or /24 I'm not real good with iptables but you might need to check your source address. Ex. 192.168.230.100/24. /24 is a full class C. trie

Re: [CentOS] Samba and iptables - woes

2009-03-30 Thread Spook ZA
Hi. 2009/3/31 Rob Kampen : > Hi folk, > I am trying to get iptables working on a samba server but find it is > blocking something that prevents the windoze clients from being able to > access the share. > here are the bits from iptables: >> >> # nmb provided netbios-ns >> -A RH-Firewall-1-INPUT -p

Re: [CentOS] Samba and iptables - woes

2009-03-30 Thread Craig White
On Tue, 2009-03-31 at 00:19 -0400, Rob Kampen wrote: > Hi folk, > I am trying to get iptables working on a samba server but find it is > blocking something that prevents the windoze clients from being able to > access the share. > here are the bits from iptables: > > # nmb provided netbios-ns > >

Re: [CentOS] Samba and iptables - woes

2009-03-30 Thread Tom
What is the subnet mask of the outside interface? What is the subnet mask of the inside interface? I'm not real good with iptables but you might need to check your source address. Ex. 192.168.230.100/24. /24 is a full class C. -Original Message- From: centos-boun...@centos.org [mailto: