Re: [Openvpn-users] Map network drives

[Emmanuel Polet <e.polet@xxxxxxxxxx>]

I'm not quite sure what iptables rules to add...
Would this do :
iptables -A INPUT -s 10.3.0.2 -i eth0 -p udp -m udp --dport 137:138 -j ACCEPT
iptables -A OUTPUT -s 10.3.0.2 -o eth1 -p udp -m udp --dport 137:138 -j ACCEPT

etc. ?

Would that be enough ?


Matteo Lunardi wrote:

Emmanuel Polet ha scritto:

The problem is, I am almost there with tun devices settings.... I don't really fell like going through all the process again with tap devices ! I can ping accross the tunnel (with tun) and access all my network computers ! Why wouldn't it allow me to map network drives if I use IPs ? For instance : "net use : \\192.168.0.3\d"  does not require windows netbios naming features .... (or there's something I have missed somewhere...).

In a previous message http://sourceforge.net/mailarchive/message.php?msg_id=9586187  I wrote this:
"I got server status and shares working by allowing UDP ports 137 and 138 (source _and_ dest), and TCP ports 139 and 445 (source _or_ dest); I don't remember exactly, but I think that udp 138 is just for server status, udp 137 for name service and shares under win9x clients, tcp 445 for shares under win2k/xp clients."

Sorry but I still don't know iptables, so I cannot tell you more.
Anyway you can use a sniffer on the client to see what's going out, and look the logs on the server to see if any packet has been rejected (if rules log rejected packets).

I guess the command you mean is something like
net use R: \\192.168.0.3\d
and not just
net use : \\192.168.0.3\d


Bye.
Matteo



-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users

--
Emmanuel Polet
IT Manager
SEI
e.polet@xxxxxxxxxx
Tel. : 04 74 99 06 62