Networking :: IPtables And Samba - No Access To Workgroup PCs
Feb 27, 2009
At first I installed debian 5 and I want enter on my workgroup using windows XP PCs, in same time I want use firewall now when I stop firewall I can access on the pcs but when I start iptables and open port for samba such as 137,138,138 and 445 I can't access on any PC on work group this is the output of iptables - L command:
Code:
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp dpt:netbios-ns state NEW
ACCEPT udp -- anywhere anywhere udp dpt:netbios-dgm state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn state NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-ds state NEW
Chain FORWARD (policy DROP)
target prot opt source destination
Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
View 6 Replies
ADVERTISEMENT
Jan 5, 2011
I have one PC (morpheus) on which I've chosen to share a couple of folders in the home directory. The folders show the "Shared" icon in them and are chmod 777'd. I can access them by going to Dolphin -> Network -> Samba Shares -> Workgroup -> Morpheus -> Foldername ... but *only* on that same computer (Morheus). All my computers are running Kubuntu with KDE 4.5 and attached by ethernet.
If I try and go to Dolphin -> Network -> Samba Shares on *any* other computer, Dolphin just reports "Unable to find any workgroups in your local network. This might be cause by an enabled firewall." I've never set up a firewall on any of these computers. Do I need to open ports on my router just for this? Morpheus is set to DMZ mode on the router so it should accept *any* port request not assigned to another computer already.
I have a feeling that there's just something obvious I don't know, because in all my years of trying to get this to work on and off, I've never managed to find a decent *simple* CLI or GUI based tutorial or figure it out myself. The web just seems full of long threads of people having very specific problems unique to their situation trying to sort them out. I just want to share folders over a lan via KDE.
View 1 Replies
View Related
Mar 23, 2010
I'm running Ubuntu 9.10, and am getting the following error when I attempt to access the HADEN workgroup on my Windows network via Samba: Unable to mount location - Failed to retrieve share list from server. I ran the following command:
Code:
peterv@MBP17U:~$ findsmb
sh: /usr/bin/nmblookup: not found
*=DMB
+=LMB
IP ADDR NETBIOS NAME WORKGROUP/OS/VERSION
[Code]...
On my Windows XP machine, I can see the Ubuntu directory and can access files on it. I just can't access the Windows workgroup from Ubuntu.
View 1 Replies
View Related
Mar 28, 2010
Similar to how Windows can list all computers in your workgroup (even if it's a slow process sometimes).
Can smbclient command do this or another samba util?
View 2 Replies
View Related
Feb 22, 2010
I have two types of OS in my network windows (XP,7) and linux (debian 5.03, ubuntu 9.10 8.04, fedora 8) all of linux can see an reach the windows shared folders but windows can not reach linux shared folders what can I do fo fixing this problem what should I follow. I have to say I disabled all of windows firewalls; and all linuxs can reach each other shared folders. (My network is Workgroup not domain).
View 2 Replies
View Related
Apr 13, 2010
My interest to be able to join my windows workgroup and be able to work with the windows shares . I am running Fedora 12 in a virtual machine as guest OS. I know I have to install Samba which does not come installed in Fedora 12. Do I need to configure samba after installation if my only interest is to work on windows shares from Fedora and not the other way around? .
View 7 Replies
View Related
Dec 30, 2010
I have a home network with Ubuntu (3 PC) Windows (XP 3, 7 1 vista 1) and Lacie networked drive. I have successfully edited fstab to mount the lacie drive at startup on my main ubuntu PC and it works a treat. My problem is setting up the Unbutu PCs to browse the workgroup. This was working but now (since my last update of Unbutu I think) I get prompted for a password and no matter what I do it does not let me browse.
Now I have read a few things on Samba and do not have the time or ability to become a network engineer. All I want to do is is have on my Ubuntu the same browsing ability that seems to come out of the box in Windows.
View 9 Replies
View Related
Aug 15, 2009
After installing Samba as per procedure, Samba does not see Windows "workgroup".
View 4 Replies
View Related
Oct 29, 2010
I have an OpenSuSe Server configured with DNS, Samba (PDC + WINS), LDAP, Squid All this is in a hybrid scenario with other OpenSuse acting as clients and some Windows 7 also as clients. Everything works perfect. Both systems are able to join and authenticate in the Samba server very smoothly.
My problem is that in my workspace I have several different subnets/VLANS. So I have another OpenSuSe client here that needs to join the domain and authenticate with the samba server, but he just cant find it via the Windows Domain Membership setup screen (where I usually configure the others).
The server can pe pinged, and it does resolv local domain names. It seems the problem is that I have no place to configure a PDC/WINS server in Linux Client. It only asks me for the domain to join, and then it doesnt find it (Im guessing this happens because it cant receive the broadcasts from the server network).
Is there any way to declare the Samba/PDC/WINS server on the client side?
View 10 Replies
View Related
Apr 28, 2010
I need to access a Linux box via SSH & Samba that is hidden/connected behind another one on its own local network.
Setup :-
Code:
A switch B C
|----| |---| |----| |----|
|eth0|<-->| |<-->|eth0| | |
|----| |---| |eth1|<-->|eth1|
|----| |----|
E.g., I need to SSH/Samba from A to C. How does one go about this? I was thinking that it cannot be done via IP alone? Or can it? Could B say "hi on eth0, if your looking for 192.168.0.2, its here on eth1"? Is this NAT? This is a large private network, so what about if another PC has that IP?! More likely it would be PAT?
A would say "hi 192.168.109.15:1234"
B would say "hi on eth0, traffic for port 1234 goes on here eth1"
How could that be done? And would the SSH/Samba demons see the correct packet header info and work??
IP info :-
Code:
A - eth0 - 192.168.109.2
B - eth0 - 192.168.109.15
- eth1 - 192.168.0.1
C - eth1 - 192.168.0.2
A, B & C are RHEL (RedHat)
But Windows computers can be connected to the switch. I configured the 192.168.0.* IPs, they are changeable. So I have read that this should be done via iptables? But what is the correct command line to do this? And where does one put permanent iptable config?
View 7 Replies
View Related
Mar 30, 2010
I set up a samba file sharing system but my workgroup asks for a username and password see this-This is the text in /etc/samba/smb.conf:
# smb.conf is the main Samba configuration file. You find a full commented
# version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the
# samba-doc package is installed.
[code]...
View 9 Replies
View Related
Jun 12, 2009
I've been running a Samba server under RedHat 8 for five years without a hiccup. I want to cut over to a F10 box but cannot get shares accessible. smbclient attempts fail over NT password error. SELinux is disabled. Server is visible on the network. Users require no password access to shared data.
smb.conf follows:
# Samba config file created using SWAT
# from UNKNOWN (>)
# Date: 2009/06/12 14:15:15
[code]....
View 1 Replies
View Related
Jul 9, 2010
I am trying to lock down our application and server with iptables. Anybody have any idea how to prevent accesses to the application from another application? Basically I opened up the ports 80 and 443 for the application server. However, the application points to other apps (ie. database, ldap). I want to limit what it can connect to or who can connect to it. Bascially I can limit who connects to the server itself but the application can still get input from outside servers.
View 4 Replies
View Related
Apr 25, 2010
Just wondering if it is possible to block web access on a certain ip address with iptables.
Iv seen guides for blocking web traffic on a whole network but i want to just block a single host from accessing the web.
View 14 Replies
View Related
Mar 31, 2010
Basically, I have a windows 2003 server virtual machine (vmware) inside Ubuntu 9.10.
The Ubuntu machine has IFconfig:
Code: sam@sam-laptop:~$ ifconfig
eth0 Link encap:Ethernet HWaddr 00:15:c5:b8:c8:8b
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Interrupt:17
Why can't I ping or simply access the internal server on my ubuntu machine from a another computer on the 192.168.1.0 (slash)25 physical network? Do I need a bridge? Iptables?
View 4 Replies
View Related
Jan 24, 2010
I'm running an own PPTP Server, but I can't get it to access the internet. All my PCs at home run in the 192.168.0.0/24 net, the PPTP Server has local IP192.168.0.5 and remote IP 192.168.0.80-99. The router to the internet is at 192.168.0.1, and the IP of eth0 on the machine where the pptpd runs is 192.168.0.4. I want to be able to connect to the internet trough that VPN and access my local LAN servers (which works fine so far). I can ping internet and local IPs successfully, but can not access them with a browser, or connect to them in any other way. I have 'accepted' all in/output and forwards.
I am running a Squid proxy on the same machine, and if I do:
iptables -t nat -A PREROUTING -j REDIRECT -i ppp0 -s 192.168.0.0/24 -p tcp --dport 80 --to-port 3128
I can access the internet through Squid, but of course Jabber/ICQ etc. Won't work then because it just refers port 80. But I want the PPTP Clients to connect to the internet directly, if I don't use that rule it's not possible to load any pages. But pinging works all the time. DNS is also working fine, but I can't even access webpages via IP directly. How can I allow the PPTP IPs 192.168.0.80-99 to get direct access to the Internet with Iptables?
View 3 Replies
View Related
Jan 14, 2010
I have a small home network with a router to the outside world and an ubuntu server through which traffic passes first.My ISP limits my download usage during the day, which traditionally has not been an issue, but now the children come in from school, boot up the internet and up goes my usage!Ideally I would like to be able to restrict them to IM and maybe certain specified URLs (I think the latter probably needs to use Squid though?). Once the download limits are lifted, I would like my iptables to allow HTTP, etc, but pretty much block most other things.
I have two sets of iptables currently to approach this issue, with a cron job that runs to swap between one and the other.Chains run in order, so if rule A says allow x, and rule B says drop all, then X should still be allowed. However, try as I may, this is not what happens in practice. I have even tried changing the overall order from ALLOW to DROP in FORWARD and then approach from the other angle. That didn't work either. *IS* it actually possible to block all but http / https and IM? These are myrules:
Code:
# Generated by iptables-save v1.4.4 on Sat Jan 9 19:15:49 2010
*nat
:PREROUTING ACCEPT [583:45175]
:POSTROUTING ACCEPT [694:60887]
:OUTPUT ACCEPT [143:18642]
[code]....
View 14 Replies
View Related
Mar 9, 2011
Ive managed to install samba, I've shared a folder. I can access from a Windows 7 machine via \ubuntupublic. I can put files in the folder form the ubuntu machine and edit them on the windows box. I can put files in the folder/share from the Windows box but then I cannot edit them on the Ubuntu machine (they are read only and have a "Lock" over them). I can fix this by going to the properties of the file/folder in Windows and manually assigning "Everybody" full control (then the lock disappears and all is well.) I want read/write access to all the folders contents from both machines all the time (security is NOT a concern I WANT the permissions wide open) what am I doing wrong?
View 7 Replies
View Related
Jan 10, 2010
I have tried following several online tutorials but can not get to the CD ROM Drive on my SUSE machine from my Netbook (Win XP). When I try to map the CD ROM from the PC it tells me \Netbookcd rom (Netbook is the NetBios name and cd rom is the share in SAMBA) the mapped network drive could not be created because the following error occurred. More data is available I have been struggling with this for several days have researched the LINUX Bible and several places online but cannot seem to get anywhere. I have learned a little about SAMBA and SWAT but not enough to make this work.
View 6 Replies
View Related
Mar 4, 2010
I'm having problems in accessing a storage device (NAS 200 Linksys) in a network via Ubuntu. I think the problem is with the configuration of Samba.
On my computer the login and password are the same in Ubuntu (9.04), samba and Win XP.
Under windows I view the device in the network and, when I click on its icon, a window opens with the directories that have access.
Under Ubuntu, I can see all the computers in my workgroup and the device. However when I click on its icon only a blank window is opened.
I share printers without problems.
In my settings for the samba security = user.
Does anyone know if there is any configuration that allows access to the NAS?
View 2 Replies
View Related
Apr 26, 2010
I installed samba (in Ubuntu 9.10) and I can access shared files in Ubuntu from Windows 7 but when I try to access W7 files from ubuntu: Places>Network, it prompts me Username,Domain, Password. I tried Username = W7 usernameDomain=my workgroup (MSHOME)Password=W7 login passwordbut it prompts me same thing again...checked some other related threads but couldn't get any luck.
View 4 Replies
View Related
Sep 6, 2010
The goal is the following: I want one samba network share with all my family data. Multiple users should have access to this share from Win7 pcs but not all folders should be access able by everyone. The old windows server managed this by changing ntfs rights for these folders.
I've installed Samba and this recommended gnome utility (Ubuntu 10.4). First for testing I made a samba share with access right for everyone. Everything fine on Win... Then I only allowed for my user. Also worked after a little bit of playing with the global samba settings and the pw encryption... Then I created a new ubuntu user and configured a new samba user with the connection to this ubuntu user (like described in many tutorials using the samba config tool). I changed the access right of the samba share to allow the new user also but no connection was possible. At this point the original user was working from the same pc without any problem.
I started thinking of the windows time and decided to search for the file system rights like it was with the ntfs. I'm using ext4 by the way. I made chmod 777 -R from the new users login... (i'm not sure why there is no user dependency for chmod) I used chown -R but it seems that there is only one owner allowed so I switched back to my main user... I installed an additional feature called ACL and was able to set users and groups for the root folder but there is no possibility to recursively change all subdirs. I used such a ACL gui extension for gnome which is in the ubuntu repository to do that. It also wasn't helping for the problem that the new user has no access to the folder (even if I change the rights manually)
User A & B have access rights at least for the root of the share. Both users have a ubuntu and a samba account. Only user A is working with samba.
View 2 Replies
View Related
May 3, 2011
I have a samba-share that mounts on my desktop. But how do I find it from applications?
When I browse from application is not visible in the desktop folder.
PS. I find it with smb://pathway, but I don't know how I can do it from some gui-applications.
View 1 Replies
View Related
May 31, 2011
find that i cant access from my ubuntu box (desktop), now running 11.04 (i was able to access yesterday, when i tested the config). I CAN access from my XP and Win7 virtualboxes.and also from another win7 on the house.. So server is working good aparently.This is all i modified from the default config file:
Code:
####### Authentication #######
# "security = user" is always a good idea. This will require a Unix account
[code]....
View 1 Replies
View Related
Mar 8, 2009
So everything seams to be fine on my F10 boxes networking. I can ping computers on the network with both LAN IP addresses, and their hostnames. However, I can only access my F10 box with a LAN IP. In windows, I go to view workgroup computers... only the windows systems. If I go to the F10 system with samba via the IP address it works fine, just can't get to it with a hostname.
I'm wanting a static IP of 192.168.1.22. And on the windows workgroup "workgroup".
I'm new to doing things with linux that are remotely difficult... and well, this has proven to be. I can't work out if this is a SMB problem, general networking...
smb.conf (I've ommited the top info segment due to forum character limit, as well as the SELINUX notes)
Code:
#======================= Global Settings =====================================
[global]
# ----------------------- Netwrok Related Options -------------------------
#
[Code].....
View 7 Replies
View Related
Feb 19, 2010
I have an existing windows workgroup set up. (for those interested, at the moment we must keep two computers on windows for school reasons...but will change as quickly as the semester is over and run windows in virtual) anyway, the workgroup has an HP F300 printer. our Ubuntu computers can see the network, and access shared files and external hard drives. but, it does not see the printer. we are running 9.04 on one computer, and 9.10 on the other. i know from [url]that if i connect directly, the printer will work. how do i access the printer without connecting directly?
How can i get all these to talk to each other when I get rid of the Windows set up? can someone point me to a guide for resetting things on a Ubuntu network/workgroup?
View 2 Replies
View Related
Mar 6, 2010
i was trying to create a share in ubuntu.went to smb.conf and joined a workgroup but the name i gave for it was wrong..i fixed it later on..but the name of the workgroup won't go from the network..How can i delete the workgroup from the network?
View 5 Replies
View Related
Apr 6, 2011
I need to reinstall the samba directory, mainly to get the default smb.conf. It appears I have to remove smbclient, which takes ubuntu-desktop with it (which I now know is mostly ok). Hopefully reinstalling those will then replace /etc/samba. There's enough troubleshooting samba threads out there for the rest. I'll flag this solved when I'm done.
I am working on setting up BackupPC on Maverick , for my network. I am unable to view my WinXP machine's shares if I type "sudo smbclient -L //JonDoe/" . However it works if I use the XP machine's IP "sudo smbclient -L //192.168.1.100/". Viewing the workgroup (with the proper name) in Nautilus only shows the Ubuntu machine. I ended up using multiple how-tos which had me install the following packages : Samba, smbfs, system-config-samba.
With all that nothing worked so I decided to uninstall the above with "remove completely" in synaptic, expecting everything to be completely gone. But /etc/samba with smb.conf still existed so I deleted it. OOPS!!! . Installing Samba after the uninstall did not create a new /etc/samba/ directory. Reinstalling smbclient in synaptic didn't create it either. Uninstalling smbclient with pull BackupPC with it. Sweet! I do have a firewall package installed which allows outgoing but blocks inbound traffic from outside my LAN. I will disable it when I get home.
View 1 Replies
View Related
Mar 31, 2010
my main computer hostname is home, and the others are ubuntu and eduardo.In home, I try to configure samba, downloading it with "sudo apt-get install samba" and then downloading at the synaptic manager the samba-common-bin thing.I shared my folders as ROOT in home and I cannot access from ubuntu and eduardo.Then I googled and I found this site: Quote:URL]Well... I follow all steps and I can't access these files.What I need to do to share files between these computers???
View 9 Replies
View Related
Sep 22, 2010
I need to access a windows share at my university's server. When I am at the university, I can access the share by nautilus (or dolphin) in a similar way to ftp:
smb://domain%5Cusername@server/share
The thing is that when I try the above anywhere else except the university, it does not connect. I guess it has something to do with the domain, but I am not sure.
View 5 Replies
View Related
