http://bugzilla.novell.com/show_bug.cgi?id=541958 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@novell.com AssignedTo|bnc-team-screening@forge.pr |locilka@novell.com |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541958 User locilka@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=541958#c2 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|locilka@novell.com |samba-maintainers@SuSE.de --- Comment #2 from Lukas Ocilka 2009-09-25 06:09:31 MDT --- Configurations 'samba-server' and 'samba-client' are maintained by Samba team. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541958 User locilka@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=541958#c4 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|locilka@novell.com | --- Comment #4 from Lukas Ocilka 2009-09-25 06:38:36 MDT --- "FIREWALL": CWMFirewallInterfaces::CreateOpenFirewallWidget($[ "services": [ "service:samba-server" ], "display_details": true ]), YaST currently doesn't support any other method than FW_CONFIGURATIONS_* for opening a firewall port(s). BTW: samba-server should contain all ports required by server, using samba-client should not be needed. It comes from the understanding what *-server vs *-client means. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541958 User boyang@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=541958#c5 --- Comment #5 from Yang Bo 2009-09-26 21:08:25 MDT --- Shouldn't there be something like FW_ALLOW_FW_BROADCAST_UDP="137 138"? @Johan: pls verify if there is something like the one mentioned above. thanks! -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541958 User lnussel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=541958#c7 --- Comment #7 from Ludwig Nussel 2009-09-28 08:37:53 MDT --- /etc/sysconfig/SuSEfirewall2.d/services/samba-server does not list any ports for UDP and BROADCAST. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541958 User albert.passalacqua@gmail.com added comment http://bugzilla.novell.com/show_bug.cgi?id=541958#c9 --- Comment #9 from Alberto Passalacqua 2009-10-08 13:59:22 MDT --- Created an attachment (id=321720) --> (http://bugzilla.novell.com/attachment.cgi?id=321720) Output of iptables-save on openSUSE 11.1 with samba server/client and netbios server interfaces allowed Hi, following a discussion on the -project mailing list, I decided to take a look at what Fedora and RHEL do in this field, since they have had a working implementation of samba and iptables for a long time, without the troubles we face on SUSE even after allowing samba client and server interfaces in SUSEfirewall using YaST. You find attached the iptables generated on Fedora when the two options "samba client" and "samba server" are selected in their firewall tool (btw, it warns it uses an addtional helper called nf_conntrack_netbios_ns). You also find attached what iptables-save returns on openSUSE 11.1 after allowing samba client, server and netbios server in YaST SuSEfirewall interface. I hope this helps to finally find a solution :-) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541958 http://bugzilla.novell.com/show_bug.cgi?id=541958#c11 Malvern Star changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |malv_star@hotmail.com --- Comment #11 from Malvern Star 2010-07-04 15:25:36 UTC --- Has this been fixed for 11.3? The YaST2 Samba module should allow Netbios Server and Samba Client in the Firewall module. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541958 http://bugzilla.novell.com/show_bug.cgi?id=541958#c yang xiaoyu changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |xyyang@novell.com AssignedTo|bnc-team-screening@forge.pr |yast2-maintainers@suse.de |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541958 http://bugzilla.novell.com/show_bug.cgi?id=541958#c14 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|lnussel@novell.com |lmuelle@novell.com --- Comment #14 from Ludwig Nussel 2010-07-13 10:36:42 CEST --- see comment#7 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=541958 https://bugzilla.novell.com/show_bug.cgi?id=541958#c16 --- Comment #16 from Johan Persson 2010-11-05 07:16:33 UTC --- Is there any updates on this issue? I just tried 11.3 ans as is pointed out this issue remain. I fully understand if this is not a high priority since the people (like me) that want this can do the manual tweaking necessary. However I believe that unless this is properly fixed the option "Open ports in firewall" should be disable since it is highly misleading. Unfortunately I'm not sure I have the expertise in network configuration not to open up too much. I thinks the following minimum needs to be achieved * SMB Server detectable by clients on the network by browsing * Full traffic (of course..) through the FW * Discovery of other servers on the network through Dolphin Basically a fully working SMB server. (There might be security implication by this but any person who enables SMB server would have to know that and be aware of the limitations/consequences) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=541958 https://bugzilla.novell.com/show_bug.cgi?id=541958#c18 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |locilka@novell.com |ovo.novell.com | --- Comment #18 from Ludwig Nussel 2010-12-14 17:06:24 CET --- (In reply to comment #4)

"FIREWALL": CWMFirewallInterfaces::CreateOpenFirewallWidget($[ "services": [ "service:samba-server" ], "display_details": true ]),

So after talking in circles for years this turns out to be the culprit! The broadcast definition is in the netbios-server service file! So yast needs to specify both samba-server and netbios-server here to allow access to the server itself and name resolution. Do'h! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=541958 https://bugzilla.novell.com/show_bug.cgi?id=541958#c20 Malvern Star changed: What |Removed |Added ---------------------------------------------------------------------------- Version|Milestone 4 of 6 |Milestone 5 of 6 --- Comment #20 from Malvern Star 2010-12-30 19:01:44 UTC --- This bug is still present in 11.4 M5. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=541958 https://bugzilla.novell.com/show_bug.cgi?id=541958#c23 --- Comment #23 from Malvern Star 2011-01-06 16:32:27 UTC --- Thankyou so much Lukas. Hope to see the change in M6 or beta. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=541958 https://bugzilla.novell.com/show_bug.cgi?id=541958#c26 --- Comment #26 from Lukas Ocilka 2011-01-10 09:35:54 UTC --- OK, I'll add "Samba Client" as well. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=541958 https://bugzilla.novell.com/show_bug.cgi?id=541958#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:planned:update -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=541958 https://bugzilla.novell.com/show_bug.cgi?id=541958#c32 --- Comment #32 from Malvern Star 2011-01-30 17:22:00 UTC --- Works nicely. Yay! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.