Firewall problems [Solved]

[tek640]

I am trying to setup firewall to work services like ssh and samba. I followed this guide but still have problems to connect. I used the same settings in ubuntu to another partition and everthings works great.

Code: Select all

sabayon tek640-sabayon # ufw status verbose
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing)
New profiles: skip

To                         Action      From
--                         ------      ----
22                         ALLOW IN    192.168.1.0/24 22
137,138/udp (CIFS)         ALLOW IN    192.168.1.0/24 137,138/udp (CIFS)
139,445/tcp (CIFS)         ALLOW IN    192.168.1.0/24 139,445/tcp (CIFS)

sabayon tek640-sabayon #


If I disable ufw firewall i can see my shared folders and i can connect through ssh. Can anyone help me?

[Fitzcarraldo]

If you're using ssh, have you tried the following (as root user):

Code: Select all

ufw allow ssh

[tek640]

Finnally with terminal works everything. After your reply i gave the same command for samba:

Code: Select all

ufw allow cifs

Thanks for your help. But why didn't work from the ufw gui?

[Fitzcarraldo]

I've no idea, as it works for me. What does the command ufw status verbose return now?

[tek640]

This is the output:

Code: Select all

sabayon tek640-sabayon # ufw status verbose
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing)
New profiles: skip

To                         Action      From
--                         ------      ----
22                         ALLOW IN    Anywhere
137,138/udp (CIFS)         ALLOW IN    Anywhere
139,445/tcp (CIFS)         ALLOW IN    Anywhere

sabayon tek640-sabayon #


I just notice that when i open firewall not ask password like before. I think something going wrong.

[Fitzcarraldo]

Well, you can see from the output you posted why it works now.

It appears to me that the only reason it didn't work before is because your home network IP address range is not 192.168.1.0/24. Before setting up the rules did you check your router via its Web browser interface to see what the IP address range is for your home network?

[tek640]

My network ip is 192.168.1.xxx so i think that is correct the IP address range.