Windows File Sharing with IPCop

From: Bryan Ponnwitz (bponnwit@btboces.org)
Date: 08/21/02 

Date: Tue, 20 Aug 2002 20:36:07 -0400
From: "Bryan Ponnwitz" <bponnwit@btboces.org>
To: <focus-ms@lists.securityfocus.COM>

I've run into a road block with my IPCop firewall and I'm hoping for
some help. Here's the scenario:

I'm running IPCop at work to segment me from the rest of the network. I
have a WinXP box behind my IPCop firewall. The XP machine is acting as
a File and Printer Sharing and Terminal Services server. File sharing
is configured for TCP/IP (no NetBIOS). I would like to be able to
access the WinXP box from the outside network. I looked on the
Microsoft support site, and found that you need to forward 445/TCP and
445/UDP to get it to work. I set this up and still cannot access the
shares. I did the exact same setup for Terminal Services (except on
port 3389) and it works like a charm. When I try to telnet to port 445
on the IPCop machine from the external network, it doesn't connect which
makes me think that it's a problem with IPCop. Could it be that IPCop
runs it's secure web UI on port 445 and is therefore blocking that port?
Any help would be much appreciated!!

Bryan Ponnwitz
Webmaster - Broome-Tioga Boces
bponnwit@btboces.org
(607) 763-3609

Relevant Pages

  • RE: Windows File Sharing with IPCop
    ... netbios use explicitly) without having these open. ... Windows File Sharing with IPCop ... I'm running IPCop at work to segment me from the rest of the network. ... port 3389) and it works like a charm. ...
    (Focus-Microsoft)
  • Re: Windows File Sharing with IPCop
    ... you do not need to open the NetBIOS ports to use file and printer ... Windows File Sharing with IPCop ... port 3389) and it works like a charm. ...
    (Focus-Microsoft)
  • RE: Windows File Sharing with IPCop
    ... I suggest you change the port of the IPCop UI to something else its in /etc/httpd/conf/httpd.conf. ... There may also be some hard coded ipchains for the port 445 in the start-up scripts so check them also. ... Windows File Sharing with IPCop ... I'm running IPCop at work to segment me from the rest of the network. ...
    (Focus-Microsoft)
  • RE: Windows File Sharing with IPCop
    ... Ahhh, he's trying to use Direct Host, which is pretty much NetBIOS version 2 ... RPC SHOULDN'T be necessary because RPC is for client/server communications ... However, if I'm am wrong, and its happened before, open TCP port 135 (RPC ... Windows File Sharing with IPCop ...
    (Focus-Microsoft)
  • Re: IPCOP - Block Port Scanning from Inside
    ... > I have been warned today that a machine inside my network is port ... > scanning another machine outside my network. ... I am using IPCOP v1.3 with all fixes ...
    (comp.os.linux.security)