I set up the Shorewall filrewall and used the two-interface option given on the shorewall.net site.
However, although I have set Samba up to do WINS as instructed I cannot see the XP shares in SMB4K or access them via smbclient. In fact SMB4K wont allow me to expand the WORKGROUP giving an error "Connect to unknown failed"
.
Can anyone help please?

I should imagine it has something to do with the fact that I cannot see the other 3 XP machines on the 192.168.1.x subnet.

Perhaps I should mention that my Linux box is connected to 1 port of the 4 port D-Link D504T router - eth1 192.168.1.x DHCP and I have an XP box off my Linux machine using 192.168.3.1 STATIC IP of eth0 my 2nd NIC to 192.168.3.2 of XP box also using STATIC IP [I will try DHCP on this one day].

This is slightly different to the standard shorewall 2-interface scene.
The other 3 people don't want my Linux firewall so thats the reason for this deviation.

What am I not understanding?

Ad yes I did swap the eth0 and eth1 in the /shorewall/interfaces file.

My /shorewall/masq file has
eth1 eth0
#
eth1 192.168.3.0/24
eth1 192.168.1.0/24

And yes I did copy the DropSMB/RejectSMB files to /etc/shorewall.

IN FACT on the local XP machine I can see the other boxes just I can't access them.