samba+iptables

Sneppe Filip Filip.Sneppe@cronos.be
Tue, 24 Jul 2001 18:13:31 +0200


humberto@coltec.ufmg.br [SMTP:humberto@coltec.ufmg.br] wrote: 

>But after make a NAT in my lab my worktstations with windows NT 4.0
>can't
>reach the samba server.
>Anybody knows howto configurate iptables to recover the connection to my
>samba server? 

There are known issues with SMB and NAT, as some types of SMB carry IP
addresses in the packets. Here are just two articles from the MS site that
turned up after a quick search:

http://support.microsoft.com/support/kb/articles/Q172/2/27.ASP
http://support.microsoft.com/support/kb/articles/Q266/2/04.ASP

A solution to your problem would be to wait for somebody to write conntrack
and nat protocol helper modules for SMB. However, given the rather closed
nature of Microsoft's implementation of the protocol, plus their occasional
introduction of deliberate incompatibilities with Open Source projects like
Samba, this would not be a trivial task. I don't expect to see anyone
working on this any time soon.

-Filip