block windows file sharing traffic between networks
I have a LAN for users 192.0.3.0
I have a WAN for servers 192.0.0.0
I have a iptables capable router with a static route from 192.0.3.0 to 192.0.0.0
my problem is SMB file sharing traffic is leaking on to our 192.0.0.0 and causing congestion. I only have one printer IP address that needs to talk over 192.0.0.0
Can I use iptables to block traffic from all ip address from sending traffic over 192.0.0.0 except that one printer?
in short i need 192.0.3.102 to be the ONLY device that can talk to 192.0.0.10. NOTE: the iptables enabled router is on the 192.0.3.0 network.
That's odd. It usually doesn't make sense to route SMB traffic at all. Do the computers believe they're all on one big subnet? That'd be more like bridging.
Anyway. I can't guarantee this is correct, being I rarely use iptables directly, but I think I have the right idea: Explicitly allow traffic to/from your printer's IP, then explicitly deny everything else. The first rule will match your printer traffic, the rest won't and will go to the next rule which will drop it.
Code:
# Assuming your printer's IP is 192.0.3.1
# Accept 0.0 -> printer traffic
iptables -A forward --source 192.0.0.0/24 --destination 192.0.3.1 -j ACCEPT
# Accept printer -> 0.0 traffic
iptables -A forward --source 192.0.3.1 --destination 192.0.0.0/255.255.255.0 -j ACCEPT
# Reject everything 0.0 -> 3.0
iptables -A forward --source 192.0.0.0/24 --destination 192.0.3.0/255.255.255.0 -j DROP
# Reject everything 3.0 -> 0.0
iptables -A forward --source 192.0.3.0/24 --destination 192.0.0.0/24 -j DROP
hiiii,
recently we installed samba in solaris 11 machine. and create filesystem and mounted it.
we want to mount the same file system in another windows machine through samba.
How share that file system to windows and how to mount in windows . (2 Replies)
"Samba," I know, I know. However, I am a gov't worker and Samba is off the table. Does anyone have a recommendation for an off the shelf, secure solution? I've already suggested rsync and NFS services for Windows Server and got shot down. (4 Replies)
Hi guys
I need to create one directory on my Solaris 11 box and then share that directory on my LAN. I have only one disk of 500 GB which is more than enough for my needs.
I read SMB guide for Solaris and there is no guide how to achive share only on one directory, it has only tutorials for... (3 Replies)
Hi ,
We are trying to share a particular directory between solaris running from VMware installed on Win7 box] and windows box. We tried the SWAT utility of samba, and made all possible changes for sharing. We committed the changes and we were clueless what need to be done further.. referred... (0 Replies)
Hi all,
I have a request from Developer team in my compagny, they would like to be able to share data between unix and windows world.
1. We would like to be able to see Unix data from Windows : ?Samba ?
2 We would like to be able to see windows data from Solaris (Mount point) : ?NFS server... (4 Replies)
Did anybody can teach me how to set the premission in the samba server? How to i set the premission in one folder but two access right. With one folder but the user access rights is diffirent. One user can full access the folder, and another one user only read only.
thx for helping... (1 Reply)
We have a Windows Server 2003 box and I'd like to share a drive with a Sun Solaris box so that the Sun Solaris box can copy files to/from the Windows Server 2003.
I believe that Windows Services for UNIX 3.5 will allow me to do this, can anyone comfirm this ?
Also, any links on how to... (1 Reply)
12-02-2011
