Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Leonardo Rodrigues Magalhães" <leolistas@solutti.com.br>
To: Eial Czerwacki <eial@cs.bgu.ac.il>
Cc: netfilter@vger.kernel.org
Subject: Re: iptables block samba or not?
Date: Mon, 21 Jan 2008 23:52:38 -0200	[thread overview]
Message-ID: <47954C66.2000603@solutti.com.br> (raw)
In-Reply-To: <200801212233.m0LMXQqO006594@indigo.cs.bgu.ac.il>

[-- Attachment #1: Type: text/plain, Size: 1432 bytes --]



Eial Czerwacki escreveu:
> hello to all.
> I have a strange issue with iptables an samba, I've added samba's ports to iptables and tried to connect to my local network but it isnt
> working, it seems that iptables is blocking samba. here are my iptables rules:
>
>   
    iptables is NOT blocking samba. YOUR rules are blocking samba traffic.

> the ports are open and they receiving packages but the policy accept total is showing 0.
>   
    It's pretty obvious that nothing is going to reach your default 
policy ACCEPT rule ... you have a last one REJECT rule that matches 0/0 
all protocols. So, EVERYTHING will match your REJECT rule and, thus, 
never reach ACCEPT default policy one.

> how can I open them? what port or rule did I missed?
>   
    i dont have a clue .... get yourself a LOG rule before the final 
REJECT and watch for the LOGged rejected traffic .....

> one more thing, is there a way to sent multiple source addresses to one rule?
>   
    i think that can be acchieved using ipset stuff. But that's not 
completly easy ... i have never searched for that. When I need multiple 
sources, i get multiple rules ....

    but seems ipset can do the job.

-- 


	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@solutti.com.br
	My SPAMTRAP, do not email it





[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 5589 bytes --]

  reply	other threads:[~2008-01-22  1:52 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-01-21 22:33 iptables block samba or not? Eial Czerwacki
2008-01-22  1:52 ` Leonardo Rodrigues Magalhães [this message]
2008-01-23 22:00 ` Dzianis Kahanovich
2008-01-24 20:16   ` mouss
2008-01-24 20:17   ` Eial Czerwacki
2008-01-24 21:13     ` mouss
2008-01-24 21:37       ` Martijn Lievaart
2008-01-25 10:40       ` Eial Czerwacki
2008-01-25 11:49         ` mouss
2008-01-25 13:35           ` Eial Czerwacki
2008-01-25 13:42             ` mouss
2008-01-25 14:27               ` Eial Czerwacki
2008-01-25 15:15                 ` mouss
2008-01-25 16:02                   ` Eial Czerwacki
2008-01-25 16:13                     ` mouss
2008-01-25 16:53                       ` Eial Czerwacki
2008-01-25 19:02                         ` Martijn Lievaart
2008-01-25 16:04                   ` Steven Ayre

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=47954C66.2000603@solutti.com.br \
    --to=leolistas@solutti.com.br \
    --cc=eial@cs.bgu.ac.il \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox