iptables stopping samba?

[Knute Johnson]

Mark Haney wrote:
> Knute Johnson wrote:
>> I've got a funny problem with iptables and samba.  If I stop iptables 
>> the smbclient works just fine.  If I enable it, even with 137,138,139 
>> and port 445 open for both udp and tcp the smbclient reports;
>>
>> Connection to ??? failed (Error NT_STATUS_BAD_NETWORK_NAME)
>>
>> Is there another port I need to open?  Any ideas greatly appreciated.
>>
>> Thanks,
>>
>>   
> 
> I believe you've missed port 135. That's the NetBT port (IIRC) and is 
> what Windows uses to pass along resource names, hostnames, etc.  Try 
> opening that one.  If that doesn't work, i"ll have to check my samba 
> setup at the office on Monday.
> 
> 

That doesn't seem to resolve it.  I'm not clear why I would need to open 
ports on the client end anyway.  I've run wireshark and it shows the 
NBNS handshake working.  When I look at wireshark it shows the name 
being resolved and then the client end sends an ICMP packet marked 
'Destination unreachable (Host administratively prohibited)'.  I've 
searched around for that one and the only thing I can find is that it 
sometimes shows up under these exact conditions.

Thanks,

-- 

Knute Johnson
knute2008 at www.knutejohnson.com