open iptables to connect as client to windows network

Avi Greenbury lists at avi.co
Thu May 24 02:51:18 UTC 2012


oxy wrote:

> # samba
> IPT="/sbin/iptables"# samba
> $IPT -A OUTPUT -m state --state NEW -p tcp --dport 137 -j ACCEPT
> $IPT -A OUTPUT -m state --state NEW -p tcp --dport 138 -j ACCEPT
> $IPT -A OUTPUT -m state --state NEW -p tcp --dport 139 -j ACCEPT
> $IPT -A OUTPUT -m state --state NEW -p tcp --dport 445 -j ACCEPT

You appear to only be permitting packets which are involved in the
creation of a new connection, not those relating to an established one
(such as the replies); why have you got '--state NEW' in there, and
does it work if you remove them?

-- 
Avi




More information about the ubuntu-users mailing list