Re: [cobalt-users] IPchains

["Rodolfo J. Paiz" <rpaiz@xxxxxxxxxxxxxx>]

[Order of quotes reversed to make thread easier to follow... hint.]

At 4/21/01 07:35 AM -0400, Timothy wrote:
> Noodles wrote:
>
> > Hello,
> >      I am having huge problems configuring ipchains on Mistral.co.uk
> > network. I don't suppose anyone has a working firewall script that could
> > advise me do they? It is a RAQ4i and have port sentry running no 
> problems. I
> > have used ipchains before without any problems but I am unable to get it to
> > stop logging samba requests and the kernel log grows to a huge size in no
> > time.
> > Any help would be hugely appreciated
> > Stay Happy
> > Noodles
> >
>
> You have ipchains installed? I'm only asking because you didn't mention 
> it, and
> are pointing more towards the actual script. Without ipchains the script will
> obviously fail. Next, are you using samba on the server? and it should be
> logging samba to /var/log/samba/log.smb & log.nmb, where does the kernel log
> enter into it?

Actually, Timothy, I read his message differently. "...have used ipchains 
before... but I am unable to get it to stop logging samba requests..." I 
think either ipchains is logging all this, or portsentry is logging all this.

If ipchains... modify the firewall rules for ports 137:139 and remove the 
-l parameter, which is for logging.

If portsentry... modify the portsentry.conf file, and remove ports 137-139 
from the list of ports being monitored.


--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx