problems connecting samba shares

Chris Smith bsd782 at chrissmith.org
Thu Nov 16 19:04:32 UTC 2006


On Thursday 16 November 2006 13:11, Andrei Kolu wrote:
> pass in on rl0 proto udp from any to (rl0) port 137 keep state

Maybe you're blocking some necessary broadcast packets. Try changing your 
rules to something more like:

pass in on rl0 proto udp from any to any port 137 keep state

or possibly:

pass in on rl0 proto udp from any to (rl0:network) port 137 keep state

Even better, use a macro to define the ports:

samba_ports = "{ 137:139, 445 }"
pass in on rl0 proto { tcp, udp } from any to any port $samba_ports keep state

You may want to use this in your smb.conf:
smb ports = 139
and then change the above pf macro to:
samba_ports = "{ 137:139 }"

As a note it appears that your previous log is not showing a block from "any 
to rl0 port 137" but from "any port 137 to rl0", assuming the rl0 address is 
192.168.2.101. So unless there is some state matching the block seems valid.

Chris



More information about the freebsd-pf mailing list