Question on firewall config [SOLVED]

[erko]

"altair4"!

If you're on here, and/or still monitor this forum, would you please contact me. I have a newly developed question about one of your earlier (very effective) resolutions, offered here on this forum.

Thank you so much!

~erko

[altair4]

No offense but I have no intention of contacting you by email and I generally do not respond to PM's unless they come from Mint Central Command.

If you have a question post it in the forums. I looked at the posts that we were both in and it dealt with Firewalls. Trust me, whatever I know about firewalls I posted back then

You'll get a better resolution by opening it up to as many as possible.

[erko]

Hi Folks!

Okay, if this is protocol - so be it!

A while back "altair4" posted a really good & effective resolution for my issue surrounding Mint's (probably all Linux distros) on-board firewall, which is this . . .

--------------

Re: Configuring Mint (32-bit) 11's / "Katya" on-board firewall
by altair4 on Tue Oct 18, 2011 5:31 am
Give this a shot:

[1] Allow samba access
Code: Select all
sudo ufw allow Samba

[2] Allow CUPS access
Code: Select all
sudo ufw allow CUPS

EDIT: The capitalization of "Samba" and "CUPS" is important. To get a list of all these preset firewall rules and how they are spelled:
Code: Select all
sudo ufw app list

[3] Fix an oversight in the default firewall configuration

Edit a file as root:
Code: Select all
gksu gedit /etc/default/ufw

And change this line:
# extra connection tracking modules to load
IPT_MODULES="nf_conntrack_ftp nf_nat_ftp nf_conntrack_irc nf_nat_irc"

To this:
# extra connection tracking modules to load
IPT_MODULES="nf_conntrack_ftp nf_nat_ftp nf_conntrack_irc nf_nat_irc nf_conntrack_netbios_ns"
Please add a [SOLVED] at the end of your original subject header if your question has been answered and solved.
altair4
Level 10

Posts: 3055
Joined: Tue Feb 03, 2009 9:27 am

-----------------

. . . It has worked like a charm in three different Linux distros, including Mint.

The Linux distro with the above firewall config in place will see all other Windows OS'es ...well, at least XP (32-bit) & WIN 7 (64-bit).

I am able to network w/ Linux, yet, insofar as the on-board fiewwall is concerned, it is secure. Windows can see the (2) Linux machines but, that's it! MS Windows cannot navigate into the Linux machines, via the network. Linux, on the other hand, can navigate into the windows machines, via the network.

My question is: With the above Linux firewall config, how would an exclusive Linux (no other OS'es) network - work? As, the only thing I can see - Linux OS to Linux OS - is a Print folder. That's it!

What options are available in this circumstance?

Thank you much in advance!

~erko

[xenopeek]

Moved here by moderator

[altair4]

This is the way I've interpreted your post:

Linux can access the Windows machines.
Linux can access other Linux machines ( because they can see the default "print$" share ) but can't access anything usefull.
Windows can see the Linux machines but cannot access anything.

My guess is that you haven't shared anything on the Linux machines for the remote clients to access. There are a couple of ways to create Samba shares on Linux but I would try this method first since it's simpler:

Simple File Sharing in Mint: viewtopic.php?f=42&t=23169