Re: Blocking SMB

["Charlie Grosvenor" <charlie@thegrosvenors.fsnet.co.uk>]

Hi
    Will the following work?

iptables -A INPUT -p udp -i PPP0 --dport 135 -j DROP
iptables -A INPUT -p udp -i PPP0 --dport 136 -j DROP
iptables -A INPUT -p udp -i PPP0 --dport 137 -j DROP
iptables -A INPUT -p udp -i PPP0 --dport 138 -j DROP
iptables -A INPUT -p udp -i PPP0 --dport 139 -j DROP
iptables -A INPUT -p tcp -i PPP0 --dport 135 -j DROP
iptables -A INPUT -p tcp -i PPP0 --dport 136 -j DROP
iptables -A INPUT -p tcp -i PPP0 --dport 137 -j DROP
iptables -A INPUT -p tcp -i PPP0 --dport 138 -j DROP
iptables -A INPUT -p tcp -i PPP0 --dport 139 -j DROP

Also is it possible to allow outgoing smb connections so that i can connect
to hosts outside my network but they cannot connect to me?

Charlie

----- Original Message -----
From: "Moe Harley" <moeser@sisna.com>
To: "Charlie Grosvenor" <charlie@thegrosvenors.fsnet.co.uk>
Sent: Monday, February 25, 2002 1:11 PM
Subject: Re: Blocking SMB


> Howdy,
>     I'm using debian as my firewall and it works fairly well.  To shut
> off smb traffic I just block ports 135 through 139 (both tcp and udp).
>  I hope this helps.
>
> -Moe Harley
> moeser@sisna.com
>
> Charlie Grosvenor wrote:
>
> >Hi
> >    I am in trying to set up firewall on a machine running debian. What i
> >want to do is to block people browsing smb shares on my network from
> >outside. How can i do this? What ports does smb use?
> >
> >Thankyou
> >
> >Charlie
> >
> >
>
>
>