[prev in list] [next in list] [prev in thread] [next in thread]
List: gentoo-user
Subject: Re: [gentoo-user] Firewalling and Sambra printer.
From: Pupeno <pupeno () pupeno ! com>
Date: 2006-10-23 1:01:57
Message-ID: 200610230102.07476.pupeno () pupeno ! com
[Download RAW message or body]
On Sunday 22 October 2006 22:58, Dale wrote:
> Well I had a similiar issue a while back. This is what I did and it worked:
> > iptables -I INPUT 2 -p udp --dport 445 --source 192.168.0.0/24 -j ACCEPT
> > iptables -I INPUT 2 -p tcp --dport 445 --source 192.168.0.0/24 -j ACCEPT
> > iptables -I INPUT 2 -p udp --dport 138 --source 192.168.0.0/24 -j ACCEPT
> > iptables -I INPUT 2 -p tcp --dport 138 --source 192.168.0.0/24 -j ACCEPT
> > iptables -I INPUT 2 -p udp --dport 139 --source 192.168.0.0/24 -j ACCEPT
> > iptables -I INPUT 2 -p tcp --dport 139 --source 192.168.0.0/24 -j ACCEPT
> > iptables -I INPUT 2 -p tcp --dport 137 --source 192.168.100.0/24 -j
> > ACCEPT iptables -I INPUT 2 -p udp --dport 137 --source 192.168.100.0/24
> > -j ACCEPT
>
> I got that help from here:
>
> http://forums.gentoo.org/viewtopic-p-3371796.html#3371796
>
> Maybe that will help you some. Oh, may need to change the ip numbers
> where needed.
Here it didn't, my iptables are now
# iptables -vL
Chain INPUT (policy DROP 35548 packets, 16M bytes)
pkts bytes target prot opt in out source
destination
343K 561M ACCEPT all -- lo any anywhere anywhere
36M 54G ACCEPT all -- any any anywhere anywhere
state RELATED,ESTABLISHED
3 228 ACCEPT icmp -- any any anywhere anywhere
icmp echo-request limit: avg 30/min burst 5
120 7057 ACCEPT icmp -- any any anywhere anywhere
1 60 ACCEPT tcp -- any any anywhere anywhere
tcp dpt:ssh
0 0 ACCEPT udp -- any any 192.168.0.0/24 anywhere
udp dpt:microsoft-ds
0 0 ACCEPT tcp -- any any 192.168.0.0/24 anywhere
tcp dpt:microsoft-ds
2 467 ACCEPT udp -- any any 192.168.0.0/24 anywhere
udp dpt:netbios-dgm
0 0 ACCEPT tcp -- any any 192.168.0.0/24 anywhere
tcp dpt:netbios-dgm
0 0 ACCEPT udp -- any any 192.168.0.0/24 anywhere
udp dpt:netbios-ssn
0 0 ACCEPT tcp -- any any 192.168.0.0/24 anywhere
tcp dpt:netbios-ssn
0 0 ACCEPT tcp -- any any 192.168.0.0/24 anywhere
tcp dpt:netbios-ns
37 2886 ACCEPT udp -- any any 192.168.0.0/24 anywhere
udp dpt:netbios-ns
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source
destination
Chain OUTPUT (policy ACCEPT 21M packets, 3429M bytes)
pkts bytes target prot opt in out source
destination
and I still can't print. I send the print job and the printer gets into a kind
of broken state.
Well, those ports are not open on my workstation[1], so, allowing connections
to them won't change anything (unless something runs sporadically opening
those ports).
Thank you.
--
Pupeno <pupeno@pupeno.com> (http://pupeno.com)
[1] # netstat -tlun
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:8010 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN
udp 0 0 0.0.0.0:47552 0.0.0.0:*
udp 0 0 0.0.0.0:68 0.0.0.0:*
udp 0 0 0.0.0.0:8010 0.0.0.0:*
udp 0 0 0.0.0.0:631 0.0.0.0:*
[Attachment #3 (application/pgp-signature)]
--
gentoo-user@gentoo.org mailing list
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic