LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 03-29-2008, 08:08 PM   #1
enigma_0Z
Member
 
Registered: Apr 2005
Distribution: Ubuntu, RHEL, Darwin
Posts: 73

Rep: Reputation: 15
Samba help--Windows firewall is blocking pings on port 445 and 139


OK. Here's my question.

I'm trying to connect to a Windows XP share (on a XP Home box). I know that the firewall is blocking any probes on the SMB ports. Windows clients can connect to this machine, presumably because they aren't relying on a probe to see if it's active. Is there a way to get around this other than by disabling the firewall, or opening up these ports?

Thanks.

Last edited by enigma_0Z; 03-29-2008 at 08:11 PM.
 
Old 03-29-2008, 08:57 PM   #2
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
Make sure that the network file sharing protocol is installed. That may be why those ports were not opened. If that doesn't open these ports then open them in the windows firewall.
Look in the network device configuration.
 
Old 03-29-2008, 09:28 PM   #3
enigma_0Z
Member
 
Registered: Apr 2005
Distribution: Ubuntu, RHEL, Darwin
Posts: 73

Original Poster
Rep: Reputation: 15
I know it's fire firewall: file sharing has (and does) work among Windows boxes.

On the Windows box in question, I opened up connections on the lan on the firewall, and it indeed did enable communication to the machine from a linux box, but Windows machines don't have this limitation.
 
Old 03-30-2008, 04:29 AM   #4
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
What does nmap show from the Linux box and targeting the windows XP box. What does "net show" say? I don't know what kind of probes you are talking about. If a connection attempt is refused then that port isn't open. Your title said that the Windows box has firewalled off these ports. If the windows telnet client allows you to connect to another port, you could use that to test if a port is open.
Code:
jschiwal@hpamd64:~> telnet hpmedia 137
Trying 192.168.1.105...
telnet: connect to address 192.168.1.105: Connection refused
jschiwal@hpamd64:~> telnet hpmedia 139
Trying 192.168.1.105...
Connected to hpmedia.
Escape character is '^]'.
Also, make sure you don't use a domain on your Linux server because that won't with XP home edition.

Last edited by jschiwal; 03-30-2008 at 04:33 AM.
 
Old 03-30-2008, 02:38 PM   #5
enigma_0Z
Member
 
Registered: Apr 2005
Distribution: Ubuntu, RHEL, Darwin
Posts: 73

Original Poster
Rep: Reputation: 15
Maybe "probes" was not the correct word.

I did already try nmap with and without the firewall on.

When the firewall was enabled, all ports were listed as filtered (I had to run nmap with the -P0 switch, however).

When the firewall was disabled, the ports that are necessary for samba (137, 139, and 445) were open. It said that all of the other ports were closed.

As far as telnet goes, I know that if it weren't for the firewall, the ports are open. I'll have to test telnet with the firewall up to see if the connection is refused still, but the output from smbtree suggests that it will be.

I do have it working with a stop-gap solution: I configured the firewall to allow any communication from the network subnet.

My other question is how could other windows machines not have this problem, but my linux box requires the computer to be wide open in order to communicate via SMB/Samba

Thanks.
 
Old 04-01-2008, 07:34 AM   #6
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
Different Windows versions use different ports. Originally ports 137-139 were used. NT introduces WINS to reduce the number of broadcasts. XP might just use be using port 445. There is documentation on this in the chapter on browsing in the "Samba 3 HOWTO & Reference Guide". Look for a samba-doc package, or check in /usr/share/samba-<version> or /usr/share/packages/samba/. You can also download from the Samba website.

If the windows machine is Vista, you may need to upgrade your version of Samba.

After the Commerce Dept's case against Microsoft was settled, the higher ups sent down a memo to the smb2 programming team that it was "all clear to f*#@ with Samba". They even published phony documentation on how their acls work. When that came to light, it made the European courts very unhappy.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Samba/Winbind and port 445 timfair Linux - Networking 4 10-30-2009 07:38 AM
connection refused Samba port 139 cbriscoejr Linux - Networking 4 10-14-2004 10:34 AM
Samba 3 & port 445 Anibal Slackware 0 10-24-2003 12:22 PM
Samba (port 139) open to the world Tezdread Linux - Networking 4 03-09-2003 10:17 AM
cannot connect to samba server when its running on port 139 badshaaa Linux - Networking 21 02-07-2002 04:50 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 02:28 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration