Package: firestarter Version: 1.0.1-1 Severity: important
I have just installed firestarter to replace a hand-written firewall script that was given to me (but is uncomfortable to maintain). With the old script incoming connections on ports 137, 138, 139 + 445 were allowed and thus smbmounting shares on the Samba server in the local network was possible (I did not find out, why 445 was necessary. It's an old SuSE running on the Samba server). Anyway it doesn't run, if 445 is blocked. Now, I can only smbmount a share on the Samba server if I stop firestarter. I have tried opening ports 137-139 and 445 for incomming trafic for the server's IP (192.168.1.98) or the whole network (192.168.1.0/24). Also, I tried to allow all incoming traffic regardless of port from 192.168.1.98. Nothing works. I get this output from smbmount timeout connecting to 192.168.1.98:445 timeout connecting to 192.168.1.98:139 Error connecting to 192.168.1.98 (Die Operation wird bereits ausgefhrt) 19499: Connection to cip-s2 failed SMB connection failed For some reason the Samba server sends packages on ports 799, 800, too. But opening these ports for incoming traffic doesn't help. (And these ports were never open to incoming traffic before.) Kind regards Andreas -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (990, 'testing'), (400, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.7-1-386 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages firestarter depends on: ii gksu 1.2.2-1 graphical frontend to su ii iptables 1.2.11-8 Linux kernel 2.4+ iptables adminis ii libart-2.0-2 2.3.16-6 Library of functions for 2D graphi ii libatk1.0-0 1.8.0-4 The ATK accessibility toolkit ii libaudiofile0 0.2.6-5 Open-source version of SGI's audio ii libbonobo2-0 2.8.0-4 Bonobo CORBA interfaces library ii libbonoboui2-0 2.8.0-2 The Bonobo UI library ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an ii libesd0 0.2.35-2 Enlightened Sound Daemon - Shared ii libgconf2-4 2.8.1-4 GNOME configuration database syste ii libgcrypt11 1.2.0-4 LGPL Crypto library - runtime libr ii libglade2-0 1:2.4.1-1 Library to load .glade files at ru ii libglib2.0-0 2.6.1-2 The GLib library of C routines ii libgnome-keyring0 0.4.1-1 GNOME keyring services library ii libgnome2-0 2.8.0-6 The GNOME 2 library - runtime file ii libgnomecanvas2-0 2.8.0-1 A powerful object-oriented display ii libgnomeui-0 2.8.0-3 The GNOME 2 libraries (User Interf ii libgnomevfs2-0 2.8.3-9 The GNOME virtual file-system libr ii libgnutls11 1.0.16-9 GNU TLS library - runtime library ii libgpg-error0 1.0-1 library for common error values an ii libgtk2.0-0 2.4.14-2 The GTK+ graphical user interface ii libice6 4.3.0.dfsg.1-10 Inter-Client Exchange library ii libjpeg62 6b-9 The Independent JPEG Group's JPEG ii liborbit2 1:2.10.2-1.1 libraries for ORBit2 - a CORBA ORB ii libpango1.0-0 1.6.0-3 Layout and rendering of internatio ii libpopt0 1.7-5 lib for parsing cmdline parameters ii libsm6 4.3.0.dfsg.1-10 X Window System Session Management ii libtasn1-2 0.2.10-3 Manage ASN.1 structures (runtime) ii libx11-6 4.3.0.dfsg.1-10 X Window System protocol client li ii libxml2 2.6.11-5 GNOME XML library ii xlibs 4.3.0.dfsg.1-10 X Keyboard Extension (XKB) configu ii zlib1g 1:1.2.2-3 compression library - runtime -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
