[NTLUG:Discuss] Weird resolving issue

MadHat Unspecific madhat at unspecific.com
Tue Feb 27 07:51:33 CST 2007


Stephen Davidson wrote:
> Greetings.
>
> Have an odd ball issue here with MS and a SuSE 10.1 acting as a
> firewall/router.  I have a couple of 'zones', with a Samba server
> sitting on one segment.  I have a some MS machines, and some of them
> need to be segrated from some of the others, so multiple firewalls and
> zones.
>
> I have the MS machine on the "inside" of the SuSE10.1 firewall, and a
> Samba fileserver on the other side.  Firewall is also providing DNS
> services to MS machine.  I can ping the samba server from MS machine
> using the DNS name, but when I try to 'explore' to it using MS Explorer,
> does not work.  However, when I use the IP address, I get a listing of
> all the shares.  But when I try to actually access a share, the windows
> just freeze -- they do not even refresh.  Eventually they say 'share is
> not accessable'.  However, when I manually type in the share name, it
> works.
>
> Nothing in the logs about dropped packets.  And anything I googled for
> only gives me which ports to open in the firewall to allow connections
> (obviously working -- or I would not have made the connections in the
> first place!).
>
> Suggestions?  Hints?  Ideas?

You sure you are logging all dropped packets?

MS uses tcp/445 for the new sharing, but to get full functionality, you
need tcp/135. tcp/139, udp/137, udp/138 and tcp/445 in both directions.



_______________________________________________
http://www.ntlug.org/mailman/listinfo/discuss




-- 
MadHat (at) Unspecific.com, C²ISSP
E786 7B30 7534 DCC2 94D5  91DE E922 0B21 9DDC 3E98
gpg --keyserver wwwkeys.us.pgp.net --recv-keys 9DDC3E98




More information about the Discuss mailing list