|
Note
Modern Linux distributions install ipchains/iptables by default.
This is a common problem that is often overlooked.
If you wish to check what firewall rules may be present in a system under test, simply run
iptables -L -v
, or if
ipchains
-based firewall rules are in use,
ipchains -L -v
.
Here is a sample listing from a system that has an external Ethernet interface (eth1) on which Samba
is not active and an internal (private network) interface (eth0) on which Samba is active:
frodo:~ # iptables -L -v
Chain INPUT (policy DROP 98496 packets, 12M bytes)
pkts bytes target prot opt in out source destination
187K 109M ACCEPT all -- lo any anywhere anywhere
892K 125M ACCEPT all -- eth0 any anywhere anywhere
1399K 1380M ACCEPT all -- eth1 any anywhere anywhere \
state RELATED,ESTABLISHED
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
978K 1177M ACCEPT all -- eth1 eth0 anywhere anywhere \
state RELATED,ESTABLISHED
658K 40M ACCEPT all -- eth0 eth1 anywhere anywhere
0 0 LOG all -- any any anywhere anywhere \
LOG level warning
Chain OUTPUT (policy ACCEPT 2875K packets, 1508M bytes)
pkts bytes target prot opt in out source destination
Chain reject_func (0 references)
pkts bytes target prot opt in out source destination
Run the command
smbclient -L BIGSERVER
on the UNIX box. You should get back a list of available shares.
If you get an error message containing the string “bad password”, then
you probably have either an incorrect
hosts allow
,
hosts deny
, or
valid users
line in your
smb.conf, or your guest account is not valid. Check what your guest account is using testparm and
temporarily remove any
hosts allow
,
hosts deny
,
valid users
, or
invalid users
lines.
If you get a message connection refused response, then the
smbd
server may
not be running. If you installed it in inetd.conf, then you probably edited
that file incorrectly. If you installed it as a daemon, then check that
it is running and check that the netbios-ssn port is in a LISTEN
state using
netstat -a
.
|
