我试图连接到一个设置为samba共享的linux服务器。 我能够SSH和ping到桑巴服务器,但是当我试图通过Windows映射驱动器它说:“Windows无法访问\ IP \示例。
鉴于我可以ssh到它告诉我,问题来自nmb方面的事情…我已经重新启动smb,nmb和iptables,但仍然无法连接。
*$iptables -S -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited*
testparm smb.conf结果如下:
*$testparm -s /etc/samba/smb.conf Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[printers]" Processing section "[data]" Processing section "[Xerox]" Loaded services file OK. Server role: ROLE_STANDALONE [global] server string = Samba Server Version %v log file = /var/log/samba/log.%m max log size = 50 idmap config * : backend = tdb cups options = raw [printers] comment = All Printers path = /var/spool/samba printable = Yes print ok = Yes browseable = No [data] comment = Data path = /data admin users = root read only = No create mask = 0770 force create mode = 060 security mask = 0770 force directory mode = 0770 [Xerox] comment = Colour path = 142.20.216.47 printable = Yes print ok = Yes*
我已经阅读了这里的post,但它似乎是一个不同的场景。 任何build议,欢迎。
根据问题中包含的防火墙规则,您允许ICMP(包括但不限于“ping”)和SSH,但拒绝其他所有内容。
也就是说,你拒绝SMB / CIFS相关的stream量。
允许137/udp , 138/udp , 139/tcp , 445/tcp应该有所帮助。