Scenario
Linux server behind DI-701 Firewall. No Port assign to SAMBA open only 80, 22.


I want to access //domain.nam/folder from out side of the lan. What should i do?

Install SSH.
Log into Linux box via SSH (port 22).
Administer Samba.
That's how I do it.

well that 1 can access it with a putty or whatever..
but i want to connect it from win xp to the linux box..

Samba is on ports 137,138,139 I do believe. Of course this might open up your entire internal network to potential viruses.

Are trying to map a network drive via the net?

Yupe I am trying to access the network drive via the net.


more chance for viruses? but with out the right password.. is impossible to be accessed isn't?

Interesting.
Sounds risky from a security perspective.

i'd be interested to know if you make this work.

I use to have this configuration for redhat 7.3 however when i was upgrade to 8.0 i forgot to copy the conf and other configuration. There is a way but can't remember.. someone out there must know.. I will try with the firewall sometime

There is a very simple way to do this: Set your router up to allow a VPN. WHen you are away from home, "dial" into the VPN and then access the samba server from there.

vpn? erm i dont think my router support that

That's the best way to do it, if you are able to set up a VPN. If you can't do that, you will need to set the router to forward the port 137 and 139 requests to the SMB server. (I think those are the right ports)

I wanted to do the same thing and I looked around on the internet. I found a solution to this very problem without using VPN. What you can do is tunnel SMB through SSH. This way you don't have to open any other ports. You won't take any security hit. Here is a link to some information on this:

http://hr.uoregon.edu/davidrl/samba/...urity.html#ssh

There is, according to this page, one limitation to this -- You cannot do this with a 16-bit Windows OS. You have to be using NT, 2k, or XP, I believe. I wouldn't know because I wanted to access my server from work. This didn't help me because the piece of junk computer at work is Win98.

gauge73,
Can you check that link. Iam very interested in checking it out.
I received a connot find server error.

Has anyone made any progress on making this work?
gauge73, I was finally able to follow that link. I followed the instructions to the 'T' and got nowhere.
I am using 'SSH Secure Shell Client' from the windows side.
I think I set the tunneling up correct.

Anyone know of any more detailed instructions?

Bumb.

I have been searching this forum and the internet for this solution. Has this been done? Also I want to be able to set this up for a friend that works from home quite a bit and he uses Win98