pippovich

Roland, I just wanted to inform you that it did not work in the end, because I am trying to provide access to my files to XP computers and they don't have the option to log onto an NT domain. I tried it with win98 too but it did not work neither. It would recognise the domain (localhost) but it still wouldn't provide access to the files. Even if it worked on 98, without XPs having access to it is pointless so I will give up on file-sharing. I can access files on windows computers from my linux box and I can telnet into linux from windows boxes so in case I need to copy something of Mandrake, I will log via telnet and copy the files using the console. Gowator, thanks for your tip on restarting samba! Pippovich

thanks

Thanks Roland, I am going to give it a try. Does Samba need to be restarted or I don't need to touch anything else? If yes, how do you restart samba without having to restart the whole box? Pippovich

Hey I just realised that I can see the files on windoze computers. The only thing missing now is windoze users accessing files on my linux box. I suppose I have to solve the things I put in bold in the previous post. I just don't know how.

I've tried what you suggested Roland, and there has been some improvement in the following areas: - I am able to telnet into my linux box from other computers in the network - I can ping the linux box However, I still can't open my shared files :unsure:. I suppose I have to modify something else as well. I would like to show you a part from my /var/log/boot.log file, a part that has to do with the shorewall (I've bolded the part I find fishy, please let me know if you see something else): Feb 20 22:11:24 localhost shorewall: Loading /usr/share/shorewall/functions... Feb 20 22:11:25 localhost shorewall: Processing /etc/shorewall/params ... Feb 20 22:11:25 localhost shorewall: Processing /etc/shorewall/shorewall.conf... Feb 20 22:11:28 localhost shorewall: Starting Shorewall... Feb 20 22:11:28 localhost shorewall: Loading Modules... Feb 20 22:11:29 localhost shorewall: Initializing... Feb 20 22:11:29 localhost shorewall: Shorewall has detected the following iptables/netfilter capabilities: Feb 20 22:11:29 localhost shorewall: NAT: Available Feb 20 22:11:29 localhost shorewall: Packet Mangling: Available Feb 20 22:11:29 localhost shorewall: Multi-port Match: Available Feb 20 22:11:29 localhost shorewall: Connection Tracking Match: Available Feb 20 22:11:29 localhost shorewall: Determining Zones... Feb 20 22:11:29 localhost shorewall: Zones: net masq loc Feb 20 22:11:29 localhost shorewall: Validating interfaces file... Feb 20 22:11:29 localhost shorewall: Validating hosts file... Feb 20 22:11:29 localhost shorewall: Validating Policy file... Feb 20 22:11:29 localhost shorewall: Determining Hosts in Zones... Feb 20 22:11:29 localhost shorewall: Net Zone: ppp+:0.0.0.0/0 Feb 20 22:11:29 localhost shorewall: Masquerade Zone: eth0:0.0.0.0/0 Feb 20 22:11:29 localhost shorewall: Warning: Zone loc is empty Feb 20 22:11:29 localhost shorewall: Processing /etc/shorewall/init ... Feb 20 22:11:30 localhost shorewall: Deleting user chains... Feb 20 22:11:30 localhost shorewall: Setting up Accounting... Feb 20 22:11:31 localhost shorewall: Setting up User Sets... Feb 20 22:11:31 localhost shorewall: Creating Interface Chains... Feb 20 22:11:32 localhost shorewall: Configuring Proxy ARP Feb 20 22:11:32 localhost shorewall: Setting up NAT... Feb 20 22:11:32 localhost shorewall: Adding Common Rules Feb 20 22:11:33 localhost shorewall: IP Forwarding Enabled Feb 20 22:11:33 localhost shorewall: Processing /etc/shorewall/tunnels... Feb 20 22:11:33 localhost shorewall: Processing /etc/shorewall/rules... Feb 20 22:11:33 localhost shorewall: Rule "ACCEPT masq fw tcp domain,bootps,http,https,631,imap,pop3,smtp,nntp,ntp -" added. Feb 20 22:11:33 localhost shorewall: Rule "ACCEPT masq fw udp domain,bootps,http,https,631,imap,pop3,smtp,nntp,ntp -" added. Feb 20 22:11:33 localhost shorewall: Rule "ACCEPT fw masq tcp 631,515,137,138,139 -" added. Feb 20 22:11:34 localhost shorewall: Rule "ACCEPT fw masq udp 631,515,137,138,139 -" added. Feb 20 22:11:34 localhost shorewall: Processing /etc/shorewall/policy... Feb 20 22:11:34 localhost shorewall: Policy ACCEPT for fw to net using chain fw2net Feb 20 22:11:34 localhost shorewall: Policy ACCEPT for fw to masq using chain fw2masq Feb 20 22:11:34 localhost shorewall: Policy ACCEPT for masq to fw using chain masq2fw Feb 20 22:11:34 localhost shorewall: Policy ACCEPT for masq to net using chain masq2net Feb 20 22:11:35 localhost shorewall: Policy ACCEPT for loc to net using chain loc2net Feb 20 22:11:35 localhost shorewall: Masqueraded Subnets and Hosts: Feb 20 22:11:35 localhost shorewall: To 0.0.0.0/0 from 192.168.0.0/255.255.255.0 through ppp+ Feb 20 22:11:35 localhost shorewall: Processing /etc/shorewall/tos... Feb 20 22:11:36 localhost shorewall: Rule "all all tcp - ssh 16" added. Feb 20 22:11:36 localhost shorewall: Rule "all all tcp ssh - 16" added. Feb 20 22:11:36 localhost shorewall: Rule "all all tcp - ftp 16" added. Feb 20 22:11:36 localhost shorewall: Rule "all all tcp ftp - 16" added. Feb 20 22:11:36 localhost shorewall: Rule "all all tcp ftp-data - 8" added.Feb 20 22:11:36 localhost shorewall: Rule "all all tcp - ftp-data 8" added.Feb 20 22:11:36 localhost shorewall: Processing /etc/shorewall/ecn... Feb 20 22:11:36 localhost shorewall: Activating Rules... Feb 20 22:11:38 localhost shorewall: Processing /etc/shorewall/start ... Feb 20 22:11:38 localhost shorewall: Shorewall Started Feb 20 22:11:38 localhost rc: Starting shorewall: succeeded Any suggestions are more than welcome!! Pippovich

Oh, thanks. I'll give it a try and let you know about the results. I think this is one of the areas where Mandrake has to improve. I don't mind having to go through files and modify them but someone who is a total newbie (switching from point and click systems such as windoze or tomato) might find it frustrating. Pippo

No, I don't think there is anything wrong with samba cos it works perfect when the firewall is off. So, what do I do with the firewall so that it distinguishes local computers from the internet? Thanks

One more thing: I just checked and I have both webmin and SWAT installed. However, I am not sure which part I would need to modify. For instance in SWAT, there is a "globals" tab and I suppose I'd need to modify the "hosts allow" and "hosts deny" fields. There is no problem with hosts allow (I put the hostnames of the computers in my network) but when it comes to hosts deny, I don't know what to put (and no, I can't just leave it blank, I've tried it already). I suppose it has to block everything else, but how to you express it? Or, if you think I shouldn't use SWAT, suggest something else. Thanks

Well, yes. I can connect myself via samba if I don't share my internet connection. As soon as I set up the internet sharing, my file sharing stops (I can't even see other computers). I suppose it has to do with the firewall that switches on automatically with internet sharing. When I switch off the firewall, the internet sharing stops and the file sharing starts working again. In mcc (part where you fiddle with the firewall) there is an option to enable certain services to be accessed by the internet (e.g. web server, telnet server), I tried fiddling with this as well but no result. I am not a total beginner (but neighter a unix hacker) so if there are some files I'd need to edit in order for it to work, please let me know. I'd give it a try. Thanks

It's been ages since you posted this so you might have solved already. Anyways, my experience: edit the resolv.conf (file where you specify DNS numbers) and enter the IP of the computer connected to the internet (if you use DHCP instead of static IPs, enter the computer name).

Hi All, I have Mandy 9.2 set up as an internet sharing server and would like to be able to share my files as well and also to be able to access shared folders on other computers (all windoze). However, it seems that I have to choose between the two. For security reasons, as soon as I enable samba shares, the internet sharing disables itself. How do I go around this problem and still maintain a relatively secured internet connection? I would like to be able to view my files from other computers. Any suggestions? Pippovich p.s. How do I share internet connection without using DHCP? Can I set it up with static IPs? mcc does not seem to be giving me this option.