Поднял поднял самбу.Настриваю iptables,компа с самбой в локалке и соответственно ресурсов из под винды в сетевом окружении не видно(типа у вас нет прав траляля). делаю все в iptables ACCEPT и все появляется. Делаю свои правила,к ремурсам сново доступа нет.Понятно что дело в IPtables но вот где имеено найти не смог. Ниже выкладываю лог tcpdump при запросе ресурсов с винды и соответственно правила iptables:
Код: Выделить всё
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
21:56:37.654763 IP 172.27.77.105.1117 > 172.27.77.1.445: Flags [F.], seq 533194729, ack 2761019371, win 64240, length 0
21:56:42.655176 ARP, Reply 172.27.77.1 is-at 00:a0:cc:3f:df:c7, length 28
21:56:42.692944 ARP, Request who-has 172.27.77.105 tell 172.27.77.1, length 28
21:56:42.693808 ARP, Reply 172.27.77.105 is-at 08:00:27:7d:70:d9, length 46
21:56:43.071210 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:56:43.834980 IP 172.27.77.105.138 > 172.27.77.255.138: NBT UDP PACKET(138)
21:56:43.835031 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:56:43.835214 IP 172.27.77.1.138 > 172.27.77.105.138: NBT UDP PACKET(138)
21:56:44.585391 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:56:45.334731 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:56:46.140538 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:56:46.140655 IP 172.27.77.1.137 > 172.27.77.105.137: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
21:56:46.141008 IP 172.27.77.105.1119 > 172.27.77.1.139: Flags [S], seq 1833610564, win 64240, options [mss 1460,nop,nop,sackOK], length 0
21:56:46.141051 IP 172.27.77.1.139 > 172.27.77.105.1119: Flags [S.], seq 4139895309, ack 1833610565, win 5840, options [mss 1460,nop,nop,sackOK], length 0
21:56:46.141296 IP 172.27.77.105.1119 > 172.27.77.1.139: Flags [P.], ack 1, win 64240, length 72 NBT Session Packet: Session Request
21:56:46.141341 IP 172.27.77.1.139 > 172.27.77.105.1119: Flags [.], ack 73, win 5840, length 0
21:56:56.140581 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:56:56.140752 IP 172.27.77.105.1119 > 172.27.77.1.139: Flags [R.], seq 73, ack 1, win 0, length 0
21:56:56.141169 IP 172.27.77.1.137 > 172.27.77.105.137: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
21:56:56.141428 IP 172.27.77.105.1120 > 172.27.77.1.139: Flags [S], seq 3556992168, win 64240, options [mss 1460,nop,nop,sackOK], length 0
21:56:56.141481 IP 172.27.77.1.139 > 172.27.77.105.1120: Flags [S.], seq 4293115366, ack 3556992169, win 5840, options [mss 1460,nop,nop,sackOK], length 0
21:56:56.142022 IP 172.27.77.105.1120 > 172.27.77.1.139: Flags [P.], ack 1, win 64240, length 72 NBT Session Packet: Session Request
21:56:56.142066 IP 172.27.77.1.139 > 172.27.77.105.1120: Flags [.], ack 73, win 5840, length 0
21:57:06.146288 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:57:06.146496 IP 172.27.77.105.1120 > 172.27.77.1.139: Flags [R.], seq 73, ack 1, win 0, length 0
21:57:06.146762 IP 172.27.77.1.137 > 172.27.77.105.137: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
21:57:06.147103 IP 172.27.77.105.1121 > 172.27.77.1.139: Flags [S], seq 2537340826, win 64240, options [mss 1460,nop,nop,sackOK], length 0
21:57:06.147155 IP 172.27.77.1.139 > 172.27.77.105.1121: Flags [S.], seq 157178522, ack 2537340827, win 5840, options [mss 1460,nop,nop,sackOK], length 0
21:57:06.147387 IP 172.27.77.105.1121 > 172.27.77.1.139: Flags [P.], ack 1, win 64240, length 72 NBT Session Packet: Session Request
21:57:06.147432 IP 172.27.77.1.139 > 172.27.77.105.1121: Flags [.], ack 73, win 5840, length 0
21:57:16.151643 IP 172.27.77.105.1121 > 172.27.77.1.139: Flags [R.], seq 73, ack 1, win 0, length 0
21:57:16.152834 IP 172.27.77.105.138 > 172.27.77.255.138: NBT UDP PACKET(138)
21:57:16.152875 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:57:16.153026 IP 172.27.77.1.138 > 172.27.77.105.138: NBT UDP PACKET(138)
21:57:16.902475 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:57:17.654234 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:57:18.423570 IP 172.27.77.105.138 > 172.27.77.255.138: NBT UDP PACKET(138)
21:57:18.423625 IP 172.27.77.105.137 > 172.27.77.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:57:18.423812 IP 172.27.77.1.138 > 172.27.77.105.138: NBT UDP PACKET(1Правила iptables
:INPUT DROP [201:18691]
:FORWARD ACCEPT [1222:713503]
:OUTPUT ACCEPT [2260:391693]
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p udp -m udp --dport 137 -j ACCEPT
-A INPUT -p udp -m udp --dport 138 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 139 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 445 -j ACCEPT
Соответственно видно что порты нужные вроде открыл все для работы нетбиос (ндп 137,138,тсп 139 и 445)
Прошу помощи.не пойму почему не фурычит
