Hallo temans...
pengin tanya ini error apaan yah?...
pinako[pinako]# smbclient -L 192.168.0.21
timeout connecting to 192.168.0.21:445
timeout connecting to 192.168.0.21:139
Error connecting to 192.168.0.21 (Operation already in progress)
Connection to 192.168.0.21 failed (Error NT_STATUS_ACCESS_DENIED)
sudah cari-cari di google belum nemu juga, memang banyak yang punya
masalah serupa tapi belum ada jawaban yang bisa memecahkan masalah saya...
di forum luar (lupa forumnya...) ada yang bilang bahwa firewall di
win-XP yang bermasalah. saya sudah men-disable semua firewall di
win-XP... masih tetep juga...
ini konfigurasi samba saya...
pinako[pinako]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[printers]"
Processing section "[Data]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[global]
workgroup = inventorydept
server string = Samba on Zenwalk
log file = /var/log/samba.%m
max log size = 50
os level = 33
local master = No
dns proxy = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
[Data]
comment = Document-dokumen
path = /home/pinako/Documents
read only = No
guest ok = Yes
mesin linux ini juga berfungsi sebagai transparent proxy pakai squid...
jadi saya men-drop semua koneksi yang saya tidak tahu fungsinya.
apakah iptables saya ada yang salah?? ini rule2 di iptables saya...
catatan:
eth0; terhubug ke modem ADSL, dhcp... pas dapat ip address 192.168.1.14
eth1; terhubung ke jaringan internal, ip static 192.168.0.25... sedang
mesin2 lain ip-nya 192.168.0.15 s/d 25
# Generated by iptables-save v1.4.2 on Thu May 28 08:56:46 2009
*mangle
:PREROUTING ACCEPT [21417:8599896]
:INPUT ACCEPT [14325:6088373]
:FORWARD ACCEPT [7068:2509837]
:OUTPUT ACCEPT [13479:5516702]
:POSTROUTING ACCEPT [20623:8039452]
COMMIT
# Completed on Thu May 28 08:56:46 2009
# Generated by iptables-save v1.4.2 on Thu May 28 08:56:46 2009
*nat
:PREROUTING ACCEPT [1423:142178]
:POSTROUTING ACCEPT [2154:131955]
:OUTPUT ACCEPT [2607:163689]
-A PREROUTING -s 192.168.0.0/24 -p tcp -m tcp --dport 80 -j REDIRECT
--to-ports 3128
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed on Thu May 28 08:56:46 2009
# Generated by iptables-save v1.4.2 on Thu May 28 08:56:46 2009
*filter
:INPUT DROP [1263:125890]
:FORWARD DROP [4:176]
:OUTPUT DROP [59:4043]
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 3128 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 110 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 465 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 995 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 25 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 443 -j ACCEPT
-A INPUT -s 192.168.0.0/24 -p udp -m udp --dport 137 -j ACCEPT
-A INPUT -s 192.168.0.0/24 -p udp -m udp --dport 138 -j ACCEPT
-A INPUT -s 192.168.0.0/24 -p tcp -m state --state
NEW,RELATED,ESTABLISHED -m tcp --dport 139 -j ACCEPT
-A INPUT -s 192.168.0.0/24 -p tcp -m state --state
NEW,RELATED,ESTABLISHED -m tcp --dport 445 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 53 -j ACCEPT
-A FORWARD -p udp -m udp --dport 53 -j ACCEPT
-A FORWARD -s 192.168.0.0/24 -p tcp -m tcp --dport 5050 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 25 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 110 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 995 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 443 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 465 -j ACCEPT
-A OUTPUT -p icmp -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -s 192.168.0.25/32 -d 192.168.0.0/24 -m state --state
RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 110 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 465 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 995 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m tcp --dport 443 -j ACCEPT
-A OUTPUT -d 192.168.1.0/24 -p udp -m udp --sport 138 -j ACCEPT
-A OUTPUT -d 192.168.0.0/24 -p udp -m udp --sport 138 -j ACCEPT
-A OUTPUT -d 192.168.1.0/24 -p udp -m udp --sport 137 -j ACCEPT
-A OUTPUT -d 192.168.0.0/24 -p udp -m udp --sport 137 -j ACCEPT
-A OUTPUT -d 192.168.0.0/24 -p udp -m udp --dport 137 -j ACCEPT
-A OUTPUT -d 192.168.1.0/24 -p udp -m udp --dport 137 -j ACCEPT
-A OUTPUT -d 192.168.0.0/24 -p udp -m udp --dport 138 -j ACCEPT
-A OUTPUT -d 192.168.1.0/24 -p udp -m udp --dport 138 -j ACCEPT
-A OUTPUT -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --sport
445 -j ACCEPT
-A OUTPUT -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --sport
139 -j ACCEPT
COMMIT
# Completed on Thu May 28 08:56:46 2009
Problem-nya adalah saya tidak bisa melihat share folder di win-xp dengan
error timeout seperti di atas... ping ke mesin win-xp dapat reply,
demikian juga sebaliknya...
tolong, bantuin saya ya....
terima kasih
------------
Taufiq Luthfi (taufiq.lut...@gmail.com)
http://top1xx.blogspot.com
--
FAQ milis di http://wiki.linux.or.id/FAQ_milis_tanya-jawab
Unsubscribe: kirim email ke tanya-jawab-unsubscr...@linux.or.id
Arsip dan info milis selengkapnya di http://linux.or.id/milis
