Re: [Pfilter-users] smb problem?

[Neil G. <nj...@pd...>]

At 09:26 AM 10/17/2001 -0400, nb...@fr... wrote:
>I'm testing pfilter-0.82 on a RH7.1 box (RH kernel 2.4.3).
>I have
>OPENSMB #everything
>I see this in the log:
>Oct 17 09:20:42 adglinux1 kernel: external packet REJECTED:IN=eth0
>OUT= MAC=00:10:4b:6a:20:f3:00:30:7b:92:bb:dc:08:00 SRC=139.85.52.102
>DST=139.85.108.152 LEN=106 TOS=0x00 PREC=0x00 TTL=254 ID=30165 DF
>PROTO=ICMP TYPE=3 CODE=3 [SRC=139.85.108.152 DST=139.85.52.102 LEN=78
>TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=UDP SPT=137 DPT=137 LEN=58 ]

I have never seen a doubled up message like that in the log files. I can 
only assume that the icmp type 3 (which is an destination unreachable reply 
error packet) was sent in response to the udp 137 packet which is a netbios 
packet. Please send me your pfilter.conf file and the output of the 
ifconfig command.  I honestly can't figure out why the packet should be 
rejected. A test I ran here looked like the proper iptables commands were 
being generated for an OPENSMB directive.

>Since the port 137 is netbios/ns, does this indicate that OPENSMB
>isn't working correctly?  I don't know how to read the above message.
>First it says PROTO=ICMP, then it says PROTO=UDP, I don't know what
>that means.