[Samba] Why does the server want to connect to a client

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marc Muehlfeld wrote:
> Hi,
> 
> I have 5 of 140 Windows XP SP2/SP3 machines that make problems when
> printing. The client open the printer dialog and it takes a long time
> (up to 1 minute) before it appears. Printing is slow, too. Meanwhile I
> see the following messages (repeating several times) in the client log:
> 
> [2008/11/21 08:17:28, 1] lib/util_sock.c:open_socket_out(888)
>   timeout connecting to 10.1.0.253:445
> [2008/11/21 08:17:37, 1] lib/util_sock.c:open_socket_out(888)
>   timeout connecting to 10.1.0.253:139
> [2008/11/21 08:17:37, 1] libsmb/cliconnect.c:cli_connect(1505)
>   Error connecting to 10.1.0.253 (Operation already in progress)
> [2008/11/21 08:17:37, 1] libsmb/cliconnect.c:cli_start_connection(1568)
>   cli_start_connection: failed to connect to IT-09<20> (10.1.0.253).
> Error NT_STATUS_ACCESS_DENIED
> 
> Why does the server tries to open a connection to these clients? On one
> of the 5 PCs if I disable the XP firewall, the problem disappers. The
> log entries above are from a client with enabled XP firewall (unchanged
> standard settings), but there are no changes when I disable it. Some of
> problem clients only show the "timeout connection to..." messages.
> 
> I used samba 3.0.22 until yesterday, but the problem still exist after
> upgrading to 3.0.32.

It's how MS designed the WINdows print notification mechanism.
Set your firewall to reject instead of drop those packets.




cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJJvktIR7qMdg1EfYRAkCqAKDPXNU0bHAKMPpf0pYKnv48SFTm9ACg4zpv
rL7Wd7dJAouz8vJbSwrnF/s=
=oLf8
-----END PGP SIGNATURE-----