[Samba] NT_STATUS_IO_TIMEOUT at open_socket_out_send due to firewall

Mike Ely me at mikeely.org
Thu Jun 23 19:46:27 UTC 2016

On 06/23/2016 12:43 PM, Jason Waters wrote:
> Have you tried using IPTABLES to REJECT that port. It will send 
> something back and then maybe the timeout will fail immediately 
> instead of waiting the timeout period?  So on the local machine(that 
> is running winbind) try
> iptables -A OUTPUT -p tcp --dport 49155 -j REJECT
> iptables -A INPUT -p tcp --dport 49155 -j REJECT
> Might not need it in both, but since we are checking...
Good idea. The only problem is that port 49155 is one of those RPC 
highports, so there's no guarantee that specific port will always be 
used, and I wouldn't necessarily want to add an OUTPUT filter against 
all highports.

More information about the samba mailing list