Smbclient and firewall?

[Allen, Michael B (RSCH)]

There's nothing special about SMB connections. Simpler than FTP actually. It should
just work if you have a statefull firewall. If you don't just try copying the commands for
DNS and HTTP and adjust the port numers appropriately. 137 is WINS (copy DNS)
139 is transport (copy HTTP). Try opening 137 and do a nmblookup -A 15.14.3.10.

> -----Original Message-----
> From:	Phillip Fry [SMTP:zoiddy001 at yahoo.com]
> Sent:	Tuesday, September 24, 2002 1:06 AM
> To:	smb-clients at lists.samba.org
> Subject:	Smbclient and firewall?
> 
> Hi,
> I just recently set up a firewall and my smb client
> doesn't work anymore.  When I disable my firewall
> smbclient works fine. 
> 
> The error message I get is 
> 
> $ smbclient -L //hosta -d3
> Initialising global parameters
> params.c:pm_process() - Processing configuration file
> "/usr/local/samba/lib/smb.conf"
> Processing section "[global]"
> added interface ip=aaa.bbb.ccc.ddd
> bcast=aaa.bbb.ccc.255 nmask=255.255.254.0
> Client started (version 2.2.5).
> resolve_wins: Attempting wins lookup for name
> hosta<0x20>
> resolve_wins: WINS server == <15.14.3.10>
> bind succeeded on port 0
> wins_srv_died(): WINS server 15.14.3.10 appears to be
> down.
> resolve_lmhosts: Attempting lmhosts lookup for name
> hosta<0x20>
> name_resolve_bcast: Attempting broadcast lookup for
> name hosta<0x20>
> bind succeeded on port 0
> Connection to hosta failed
> 
> What ports do I need to unblock to make smb client
> work again.  I would like to have best of both worlds.
> I already tried to unblock 137:udp, 138:udp and
> 139:tcp, and they don't see to work?  Does anyone have
> any more info?  Is there a document somewhere I can
> read?  I searched google and nothing turned up.  I
> know for a fact my WINS server is up and running. 
> 
> Thanks
> 
> 
> 
> 
> __________________________________________________
> Do you Yahoo!?
> New DSL Internet Access from SBC & Yahoo!
> http://sbc.yahoo.com