remote SMB connect to RedHat box

[DavLucMac]

good evening everyone...

I've been slighly miffed lately by some of the setup problems I'm having with a server I have placed at a friends house. (My cable connection is not nearly as stable as his DSL)

I've managed to get SMB set up properly in order to access via the localhost. That is, when I'm ssh'd into the box I can:

# smbclinet //localhost/everyone

it'll prompt me for a password, and then I'm in.

HOWEVER - I cannot access the share via my ibook on the network. I can see the share, but when I try to connect, I get a connection error. I can only assume that there's something with Panther and authentication that doesn't seem as intuative as I would think.

The other problem simply has to do with wanting to connect remotely to this same share. What ports do I have to forward through the router in order to make this possible. Also, is this a major security risk?

all help is appreciated.

dav

 

[cleverhandle]

Originally posted by: DavLucMac
HOWEVER - I cannot access the share via my ibook on the network. I can see the share, but when I try to connect, I get a connection error. I can only assume that there's something with Panther and authentication that doesn't seem as intuative as I would think.

Does it work for any other machines on that network? What do the logs on the server say? Could be something complicated about the authentication protocols or it could be something simple like a "hosts allow" list. Hard to say without more information...

The other problem simply has to do with wanting to connect remotely to this same share. What ports do I have to forward through the router in order to make this possible.

You would have to forward 135 and 139 tcp, I think. Maybe others, too - I'm not sure, but...

Also, is this a major security risk?

Since the answer to this is "YES!" it doesn't really matter. You definitely do not want to pass SMB through a firewall.

 

[drag]

You don't want to share over the internet. That's a BIG NO NO, it's not a secure protocol. Very Very bad to allow internet stuff. There are ways around it, but it requires creating a VPN.

You can create a VPN using SSH, basicly you would be running TCP/IP tunnelling thru SSH. In order to do this you must have a ssh port forwarded thru one of the firewalls. Your goal is to:
1. connect from SSH client to SSH server on other side of network
2. run PPP connection between the 2 machines.
3. if you want, set up some simple routing stuff to connect the 2 lans together.

Check out: Firewall peircing mini-howto using ssh


OS 10.2 needs to use a MSAUTH module to connect to that sort of thing(ms shares using kerebos as a password encryption), but I thought 10.3 could do it natively. Also you couldn't just mount it, you had to thru the connection stuff in the finder and supply the username and password manually.