[Samba] long connect delay over vpn+firewall

[Frank Cusack]

figgered it out.  The windows client hangs trying to connect to port 80.
Either allowing port 80 (which the smb host then refuses) or configuring
the firewall to send RST in response to port 80 requests makes mounts fast.

Anyone know why windows tries to connect to port 80?

-frank

On August 18, 2006 7:02:01 PM -0700 Frank Cusack <fcusack at fcusack.com> wrote:
> I am connecting to smbd over a vpn connnection.  After tunnelled traffic
> comes out of the vpn it hits firewall rules.  Per
> <http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-samba.html#firewallports>
> I am allowing
>
>   135/TCP
>   137/UDP
>   138/UDP
>   139/TCP
>   445/TCP
>
> through the firewall.  With this configuration, mounting an smb share
> from win XP home SP2 takes 2 or 2.5 minutes. If I change the firewall to
> permit all traffic, the mount happens right away.
>
> What causes this?
>
> I'm running smbd only, not nmbd or winbindd.
>
> -frank