open iptables to connect as client to windows network

[Tom H]

On Thu, May 24, 2012 at 12:14 PM, oxy <oxyopes at googlemail.com> wrote:
>>
>> Don't remove "--state NEW" and use the following:
>>
>> -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>> -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>> -A OUTPUT -p udp -m udp --dport 137 -m state --state NEW -j ACCEPT
>> -A OUTPUT -p udp -m udp --dport 138 -m state --state NEW -j ACCEPT
>> -A OUTPUT -p tcp -m tcp --dport 139 -m state --state NEW -j ACCEPT
>> -A OUTPUT -p tcp -m tcp --dport 445 -m state --state NEW -j ACCEPT
>
> It doesnt work for me. As soon as i activate this configuration the windows
> network gets blocked for me  :-/
>
> Does it work for you?

It does. Are you authenticating against an AD server? (I'm not.)

If you are, you have to allow a few more ports; ldap, kerberos, and
possible winrpc.