[Samba] NT_STATUS_IO_TIMEOUT at open_socket_out_send due to firewall

[Mike Ely]

On 06/23/2016 12:43 PM, Jason Waters wrote:
> Have you tried using IPTABLES to REJECT that port. It will send 
> something back and then maybe the timeout will fail immediately 
> instead of waiting the timeout period?  So on the local machine(that 
> is running winbind) try
>
> iptables -A OUTPUT -p tcp --dport 49155 -j REJECT
> iptables -A INPUT -p tcp --dport 49155 -j REJECT
>
> Might not need it in both, but since we are checking...
>
Good idea. The only problem is that port 49155 is one of those RPC 
highports, so there's no guarantee that specific port will always be 
used, and I wouldn't necessarily want to add an OUTPUT filter against 
all highports.