Samba - Revision history

Christoph: /* Example setup */

2014-05-08T17:57:10Z

‎Example setup

Christoph at 17:56, 8 May 2014

2014-05-08T17:56:32Z

Christoph at 01:08, 7 June 2007

2007-06-07T01:08:50Z

Christoph at 23:37, 2 May 2007

2007-05-02T23:37:09Z

Christoph: /* Samba and iptables */

2007-04-26T20:04:25Z

‎Samba and iptables

Christoph: /* External links */

2007-03-27T02:25:49Z

‎External links

Christoph at 03:13, 24 March 2007

2007-03-24T03:13:28Z

Christoph at 23:15, 21 March 2007

2007-03-21T23:15:59Z

New page

Samba is a free software re-implementation of SMB/CIFS networking protocol, released under the GNU General Public License.

==Samba and iptables==
If you have a firewall and wish to open it up to Samba on a specific machine (i.e. a single IP address), try the following [[iptables]]:
-A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 137 -j ACCEPT
-A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 137 -j ACCEPT
-A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 138 -j ACCEPT
-A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 138 -j ACCEPT
-A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 139 -j ACCEPT
-A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 139 -j ACCEPT
-A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 445 -j ACCEPT
-A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 445 -j ACCEPT

==Automount a Samba share==
If you would like to automount your Samba shares, you can place the line below in your <code>/etc/fstab</code>:
//xxx.xxx.xxx.xxx/path /mnt/samba cifs username=username,password=password 0 0
where <code>cifs</code> might need to be <code>smbfs</code>, depending on your filesystem setup.

However, if you do not want your username and password in a text file that anyone can read, you can create a file in, for an example, <code>/etc/samba/smbpasswd</code> with the following two lines:
username=username
password=password
Then,
chmod 600 /etc/samba/smbpasswd

Now, edit your <code>/etc/fstab</code> and replace the line with:
//xxx.xxx.xxx.xxx/path /mnt/samba cifs credentials=/etc/samba/smbpasswd 0 0

==External links==
*[http://www.samba.org/ Official Samba Web Site]
*[http://www.bibsyst.no/samba/docs/using_samba/toc.html Using Samba 2nd ed. licensed under GFDL]
*[http://www.linux.ie/articles/tutorials/samba.php Setting up Samba]
*[http://showmedo.com/videos/series?name=LinuxCadieuxSamba File and Printer sharing] using Samba on Suse Linux
*[http://nobluescreens.com/solutions/samba_vista.php Configuring Windows Vista to map drives to Samba Shares]
*[http://www.vnunet.com/itweek/news/2085206/samba-beats-windows "Samba beats Windows", a study comparing the two]
*[[wikipedia:Samba]]
*[[wikibooks:Samba]]

[[Category:Linux Command Line Tools]]

@@ Line 67: / Line 67: @@
   $ vi /etc/samba/smb.conf
          workgroup = CIFSERVER
-         interfaces = lo eth
+         interfaces = lo eth0
          hosts allow = 127. 192.168.0.
          [uni]

@@ Line 38: / Line 38: @@
 It is possible to set the mount uid, gid, and umasks for file/directory create/deletion/overwrite with the following set of options:
   gid=100,file_mode=0644,dir_mode=0755
 ==External links==

@@ Line 34: / Line 34: @@
 Now, edit your <code>/etc/fstab</code> and replace the line with:
   //128.35.125.23/path /mnt/samba cifs credentials=/etc/samba/smbpasswd 0 0
 ==External links==

@@ Line 2: / Line 2: @@
 ==Samba (smb/cifs) and iptables==
-If you have a firewall and wish to open it up to Samba on a specific machine (i.e. a single IP address), try the following [[iptables]]:
+As an example Samba-share setup, assume the Windows machine ("Samba server") has an IP address of <code>128.35.125.23</code>, your Linux machine ("Samba client") has an IP address of <code>10.0.32.145</code>, and the Linux machine is behind a dedicated firewall (which does NAT).
- -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 137 -j ACCEPT
- -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 137 -j ACCEPT
+The only [[iptables]] rules you will need to implement are <code>FORWARD</code> all "source" requests (Linux box) via TCP on ports 139 and 445 with a jump target of "<code>ACCEPT</code>".
- -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 138 -j ACCEPT
- -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 138 -j ACCEPT
+The following two rules will allow the above traffic:
-  -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 139 -j ACCEPT
+  -A FORWARD -s 10.0.32.0/24 -d 128.35.125.23 -p tcp -m tcp --dport 139 -m mark --mark 0x1/0x1 -j ACCEPT
- -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 139 -j ACCEPT
+  -A FORWARD -s 10.0.32.0/24 -d 128.35.125.23 -p tcp -m tcp --dport 445 -m mark --mark 0x1/0x1 -j ACCEPT
-  -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 445 -j ACCEPT
- -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 445 -j ACCEPT
 where <code>-s</code> is your "source" IP address and <code>-d</code> is your "destination".
@@ Line 21: / Line 19: @@
 ==Test-mount your Samba share==
 As root,
-  mount -t cifs //xxx.xxx.xxx.xxx/path /mnt/samba -o username=username
+  mount -t cifs //128.35.125.23/path /mnt/samba -o username=username
 ==Automount a Samba share==
 If you would like to automount your Samba shares, you can place the line below in your <code>/etc/fstab</code>:
-  //xxx.xxx.xxx.xxx/path /mnt/samba cifs username=username,password=password 0 0
+  //128.35.125.23/path /mnt/samba cifs username=username,password=password 0 0
 where <code>cifs</code> might need to be <code>smbfs</code>, depending on your filesystem setup.
@@ Line 35: / Line 33: @@
 Now, edit your <code>/etc/fstab</code> and replace the line with:
-  //xxx.xxx.xxx.xxx/path /mnt/samba cifs credentials=/etc/samba/smbpasswd 0 0
+  //128.35.125.23/path /mnt/samba cifs credentials=/etc/samba/smbpasswd 0 0
 ==External links==

@@ Line 1: / Line 1: @@
 Samba is a free software re-implementation of SMB/CIFS networking protocol, released under the GNU General Public License.
-==Samba and iptables==
+==Samba (smb/cifs) and iptables==
 If you have a firewall and wish to open it up to Samba on a specific machine (i.e. a single IP address), try the following [[iptables]]:
   -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 137 -j ACCEPT
@@ Line 11: / Line 11: @@
   -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p tcp -m tcp --dport 445 -j ACCEPT
   -A FORWARD -s xxx.xxx.xxx.xxx/24 -d xxx.xxx.xxx.xxx -p udp -m udp --dport 445 -j ACCEPT
 ==Test-mount your Samba share==

@@ Line 39: / Line 39: @@
 *[[wikipedia:Samba]]
 *[[wikibooks:Samba]]
 [[Category:Linux Command Line Tools]]