iptables advice

Discussion in 'Server Operation' started by chrno, Sep 15, 2008.

  1. chrno

    chrno New Member

    My setup:

    Vmware Host (eth0) --- iptables (NAT) --- Vmware GuestOS (vmnet1 :: 192.168.101.0/24)


    My iptables config:

    Code:
    # Masquerade all traffic (allow NAT traffic through VM Guest)
    # vmnet1		host-only network		192.168.101.0/255.255.255.0
    
    iptables --table nat -A POSTROUTING --out-interface eth0 -j MASQUERADE
    iptables -A FORWARD --in-interface vmnet1 -j ACCEPT
    iptables -A INPUT -i vmnet1 -s 192.168.101.0/24 -d $SERVER_IP -j ACCEPT
    

    I would like to access SAMBA (this sits on the Vmware Host) from within Vmware GuestOS.
    e.g. \\192.168.101.1\SAMBA


    I'm at a lost at how to configure the iptables to grant this access from the Vmware GuestOS.

    Any help or recommendations will be kindly appreciated.



    chrno
     
  2. falko

    falko Super Moderator Howtoforge Staff

    You must open the ports 137 - 139.
     
  3. chrno

    chrno New Member

    Awesome! All sorted ... :D

    chrno

    Code:
    
    iptables -A INPUT -p udp -s 192.168.101.0/24 -d 192.168.101.1 --dport 137 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
    iptables -A OUTPUT -p udp -s 192.168.101.1  --sport 137 -d 192.168.101.0/24 -m state --state ESTABLISHED,RELATED -j ACCEPT
    
    iptables -A INPUT -p udp -s 192.168.101.0/24 -d 192.168.101.1 --dport 138 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
    iptables -A OUTPUT -p udp -s 192.168.101.1  --sport 138 -d 192.168.101.0/24 -m state --state ESTABLISHED,RELATED -j ACCEPT
    
    iptables -A INPUT -p tcp -s 192.168.101.0/24 -d 192.168.101.1 --dport 139 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
    iptables -A OUTPUT -p tcp -s 192.168.101.1  --sport 139 -d 192.168.101.0/24 -m state --state ESTABLISHED,RELATED -j ACCEPT
    
    iptables -A INPUT -p tcp -s 192.168.101.0/24 -d 192.168.101.1 --dport 445 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
    iptables -A OUTPUT -p tcp -s 192.168.101.1  --sport 445 -d 192.168.101.0/24 -m state --state ESTABLISHED,RELATED -j ACCEPT
    
    
     

Share This Page