Greetings,

I've just upgrade my home LAN from wired to a wireless router and am having difficulties getting samba to work properly between the linux server and my xp laptop.

With my former (wired) configuration (see below) everything worked fine: both could access the internet, there was full read write from the laptop _to_ the desktop, and full read from the desktop to the laptop. The desktop was / is serving as the samba server.



Cable Modem ---- (eth0) Linux desktop (eth1) -- switch --- XP laptop



My new configuration is as follows:

Cable Modem --- wireless router --- (eth0) desktop (eth1)

(pmcia card) laptop

I've assigned the router ip 192.168.10.110 and it serves dhcp addresses to both the desktop and laptop. Internet access is fine from either, but I am not able to get samba to work, although the laptop (xp) _sees_ the desktop (samba server) in it's neighborhood. When I try to access it, I get an error about the server (Grommit) not being recognized.

Can someone help me iron out the few wrinkles that I have?

I'm willing to post the relevant smb.conf, iptables and other files as needed, but thought that I'd describe the problem before posting those conf files.

Many thanks in advance
C. Masters

Check security settings on the Linux system. You might have eth0 firewalled or something when you had it connected to the modem.

Greetings,

Yes I suspect that part of the problem is the firewall that I have in place, but as my router serves via DHCP, I'm not sure how to change the firewall to allow access between my laptop and desktop without opening it up to other clients in the same subnet.

Any suggestions?

As a test try turning off the firewall, can the XP connect to Linux?

Greetings Wildar,

I turned off my iptables firewall and made another attempt. Same result as before - the Samba server (desktop) is seen in my network neighborhood, but no connection to it is possible.

I suspect that it is a combination of samba, iptables, the D-Link router firewall (which only has 3 rules) and / or routing.

If you'd like to see specific conf files, just ask and I'll post them.

Thanks for the suggestions!!!!

C. Masters

For anyone that can help me, I'm posting the full smb.conf and iptables files here.

I hope someone can find where I've set things up incorrectly!!!

--- begin insert 1 - (smb.conf) ---
# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2007/01/28 21:02:15

[global]
log file = /var/log/samba/%m.log
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
guest ok = Yes
map to guest = Bad User
null passwords = yes
encrypt passwords = yes
printcap cache time = 60
dns proxy = No
netbios name = GROMMIT
netbios aliases = GROMMIT2
writable = yes
server string = Samba Server %v
default = homes
path = /home
dos charset = 850
workgroup = MASTERSDALEY
os level = 20
comment = Grommit Homes
printcap name = cups
valid users = <valid users obscured>
security = share
unix charset = ISO8859-1
max log size = 200
log level = 3

[printers]
comment = All Printers
path = /var/spool/samba
read only = Yes
create mask = 0700
printable = Yes
print command = lpr-cups -P %p -o raw %s -r # using client side printer drivers.
use client driver = Yes
browseable = No

[print$]
path = /var/lib/samba/printers
write list = @adm, root
inherit permissions = Yes

[pdf-gen]
comment = PDF Generator (only valid users)
path = /var/tmp
guest ok = No
printable = Yes
printing = bsd
print command = /usr/share/samba/scripts/print-pdf "%s" "%H" "//%L/%u" "%m" "%I" "%J" &
lpq command = /bin/true
lprm command = lprm -P'%p' %j

[homes]
valid users = %S
hide dot files = No

[mounts]
path = /mnt

-- end insert 1 ---

for iptables the following info is provided:

eth0 - 192.168.10.16 - dhcp assignment from D-Link router
eth1 - 192.168.10.110 - static internal LAN - currently not connected
D-Link - 192.168.10.10 - connected to cable modem
laptop - 192.168.10.17 - dhcp assignment from router also on wireless pmcia card

When I have tried to assign static IP's to either eth0 or the laptop, I lose _all_ connections.

--- begin insert 2 (iptables) ---

iptables.012807.htm
Chain INBOUND (4 references)
pkts bytes target prot opt in out source destination
12 3459 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT all -- * * 192.168.10.17 0.0.0.0/0
0 0 ACCEPT tcp -- * * 192.168.10.17 0.0.0.0/0 tcp dpts:137:139
0 0 ACCEPT udp -- * * 192.168.10.17 0.0.0.0/0 udp dpts:137:139
0 0 ACCEPT tcp -- * * 192.168.10.17 0.0.0.0/0 tcp dpt:445
0 0 ACCEPT udp -- * * 192.168.10.17 0.0.0.0/0 udp dpt:445
4 360 LSI all -- * * 0.0.0.0/0 0.0.0.0/0

Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 192.168.10.10 0.0.0.0/0 tcp flags:!0x17/0x02
2 480 ACCEPT udp -- * * 192.168.10.10 0.0.0.0/0
0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/sec burst 5
0 0 DROP all -- eth0 * 0.0.0.0/0 255.255.255.255
110 13311 DROP all -- * * 0.0.0.0/0 192.168.10.255
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 LSI all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5
20 5068 INBOUND all -- eth0 * 0.0.0.0/0 0.0.0.0/0
0 0 INBOUND all -- eth1 * 0.0.0.0/0 192.168.10.110
0 0 INBOUND all -- eth1 * 0.0.0.0/0 192.168.10.16
0 0 INBOUND all -- eth1 * 0.0.0.0/0 192.168.10.110
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Input'

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/sec burst 5
0 0 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
0 0 OUTBOUND all -- eth1 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.10.110 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 192.168.10.110 state RELATED,ESTABLISHED
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Forward'

Chain LOG_FILTER (5 references)
pkts bytes target prot opt in out source destination

Chain LSI (2 references)
pkts bytes target prot opt in out source destination
4 360 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04
0 0 LOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
4 360 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
4 360 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain LSO (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Outbound '
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable

Chain OUTBOUND (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
13 6525 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
24 3648 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 192.168.10.16 192.168.10.10 tcp dpt:53
2 118 ACCEPT udp -- * * 192.168.10.16 192.168.10.10 udp dpt:53
0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
37 10173 OUTBOUND all -- * eth0 0.0.0.0/0 0.0.0.0/0
0 0 OUTBOUND all -- * eth1 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Output'

--- end insert 2 ---

Thanks in advance.

C. Masters