Samba / internet iptables
in [Linux Networking]
|
Prev: Is there a way to simulate/preview (but not really do) rsync?
Next: 7 second pause when writing file using samba before it is read via NFS
From: CCW on 5 May 2008 07:53 Hi, I'm having problems with my Samba / internet connectivity. I have the following setup: Router (192.168.0.1) --- eth0 (192.168.0.3) - eth1 (192.168.1.1) --- Windows workgroup (192.168.1.2-10) Once I'd set IP addresses on the Windows PCs (I'm using static IP addresses), using the default FC7 IPtables setup, the Windows PCs could see the internet, but not see the Samba share I'd created. Adding 2 rules to the IPtables (manually, on the command line) solved this problem. However, adding the following lines to /etc/sysconfig/ iptables file: -A RH-Firewall-1-INPUT -p udp -m udp --dport 137 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m udp --dport 138 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 139 - j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 445 - j ACCEPT has now made all the windows PCs see the Samba share on startup, but none of the windows computers can see the internet. I can ping eth1 on the FC7 server, but when I ping eth0 (i.e. 192.168.0.3), I get > Reply from 192.168.1.1: Destination host unreachable From experience (and help from here!) I know that the /etc/ nsswitch.conf file might have something to do with it; the contents of that file are: passwd: files shadow: files group: files hosts: files wins dns bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files rpc: files services: files netgroup: nisplus publickey: nisplus automount: files nisplus aliases: files nisplus My hosts file is: ::1 localhost localhost 192.168.1.100 server MyFCServer 192.168.0.3 routerConnect I can post the rest of the iptables file as well if necessary [I know I'm posting on here a fair bit at the moment, but I'm still on a fairly steep learning curve!] Thanks in advance for any help, Chris |