I have the following line in my iptables configuration;
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
When I use the smbclient command, it attempts a DNS lookup, which fails
as it should, then does a netbios nameserver lookup. The response is
getting blocked with the last line in my configuration;
-A INPUT -j REJECT --reject-with icmp-host-prohibited
I can make it work if I put in the following;
-A INPUT -p udp --sport 137 -j ACCEPT
but I thought the top line should have allowed the response to pass
through. It is coming back on the same port as it was sent on.
Any insight would be appreciated.
Thanks,
--
Knute Johnson
knute2008@xxxxxxxxxxxxxxxxxxxx
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
