Try open the 137/udp 138/udp 139/tcp It would be better. >Yes did like: > >iptables -P INPUT DROP >iptables -A INPUT -s 198.168.2.0 -p tcp --destination-port 139 -j ACCEPT >iptables -A INPUT -s 198.168.2.0 -p udp --destination-port 139 -j ACCEPT > > >Now my users can't login. > >How to open the ports? smb,ssh etc. -- JAn ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message.