[ale] Iptables: Temporarily mounting a windows share

[James P. Kinney III]

On Mon, 2006-01-16 at 16:05 -0500, Joe Steele wrote:
> Jeff Hubbs wrote:
> > That's pretty much the plan - it's the "..." after "iptables -I" that 
> > I'm concerned about.
> >   
> O.K.  You will likely need to open up outbound connections to the MS box 
> via TCP port 445:
> iptables -I OUTPUT -d <dst-IP-addr> -p tcp -dport 445 -j ACCEPT

You will also need the corresponding INPUT for the same setup. It's a
2-way comm channel. I forgot to add the line for 445 in a just prior
post. 445 is used by Windows server 2000 and 2003 and all XP (Basically
anything that belongs to a windows domain with Active Directory.)
> 
> and then allow inbound packets:
> 
> iptables -I INPUT -s <dst-IP-addr> -m state --state ESTABLISHED -j ACCEPT
> 
> Older versions of windows would want to communicate over TCP port 139 
> instead of 445.
> 
> That probably would be sufficient.  Windows also uses UDP ports 137 and 
> 138, but I'm thinking you probably don't need these.
> 
> If there any problems, ethereal should help in quickly identifying what 
> traffic you need to allow.
> 
> --Joe
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
-- 
James P. Kinney III          \Changing the mobile computing world/
CEO & Director of Engineering \          one Linux user         /
Local Net Solutions,LLC        \           at a time.          /
770-493-8244                    \.___________________________./
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part