[Cerowrt-devel] Fwd: [Bloat] Sharing Windows Files from wired to wireless (3.7.5-2)

[Cerowrt-devel] Fwd: [Bloat] Sharing Windows Files from wired to wireless (3.7.5-2)

[Jim Reisert AD1C]

I made the changes to smb.conf.template that Robert Bradley
recommended and rebooted the router.

OOOoooohhhh!!  I can see the shared desktop file systems from the
wireless Windows 7 machine!!!!

Thanks - Jim


On Tue, Jun 18, 2013 at 3:38 AM, Robert Bradley
<robert.bradley1@gmail.com> wrote:
> On 18 June 2013 06:13, Dave Taht <dave.taht@gmail.com> wrote:
>>
>> On Mon, Jun 17, 2013 at 10:09 PM, Jim Reisert AD1C
>> <jjreisert@alum.mit.edu> wrote:
>> > On the wired Windows machine.  I got this error:
>> >
>> > f:\> netsh advfirewall firewall set rule group="File and Printer
>> > Sharing" new enable=Yes remoteip=172.30.4
>> > 2.0/24
>>
>> Your network is on the default 172.30.42.X ips?
>>
>> > "Only the enable parameter can be used to update rules specified by a
>> > group."
>>
>> No clue
>
>
> It sound like you need to drop the "remoteip" part of that command and use
> it with these four extras from
> http://www.sevenforums.com/system-security/257798-windows-7-ipsec-vpn-client-firewall-configuration.html#post2136247
> instead:
>
> netsh advfirewall firewall set rule name="File and Printer Sharing
> (NB-Session-In)" new remoteip=172.30.42.0/24,LocalSubnet
> netsh advfirewall firewall set rule name="File and Printer Sharing
> (NB-Name-In)" new remoteip=172.30.42.0/24,LocalSubnet
> netsh advfirewall firewall set rule name="File and Printer Sharing
> (NB-Datagram-In)" new remoteip=172.30.42.0/24,LocalSubnet
> netsh advfirewall firewall set rule name="File and Printer Sharing (Echo
> Request - ICMPv4-In)" new remoteip=172.30.42.0/24,LocalSubnet
>
>>
>> >
>> > I got the same thing on the wireless Windows 7 machine.  I still can't
>> > see shared folders.  NetBIOS over TCP is enabled on both.
>>
>> Can you see the shared folder you setup on the cero box?
>
>
> Other things to check:
>
> - If you're using Windows 7, you may well want/need to add "reset on zero vc
> = no" to /etc/smb.conf.template too, since that seems to prevent errors
> running "net view".
> - For me at least, the "interfaces=|INTERFACES|" line seems to get expanded
> as loopback only.  You may need to replace this with "interfaces =
> 127.0.0.1/8 lo lo 172.30.42.1/27 172.30.42.65/27 172.30.42.97/27" or
> interfaces = 127.0.0.1/8 lo lo se00 sw00 sw10" to work around this.
>
> For reference, my current smb.conf.template is as follows, and Windows 7
> browsing works even in peer-peer (WINS-only) mode:
>
> [global]
>         netbios name = |NAME|
>         display charset = |CHARSET|
> #       interfaces = |INTERFACES|
>         interfaces = 127.0.0.1/8 lo lo 172.30.42.1/27 172.30.42.65/27
> 172.30.42.97/27
>         server string = |DESCRIPTION|
>         unix charset = |CHARSET|
>         workgroup = |WORKGROUP|
>         browseable = yes
>         deadtime = 30
>         domain master = yes
>         encrypt passwords = true
>         enable core files = no
>         guest account = nobody
>         guest ok = yes
>         invalid users = root
>         local master = yes
>         load printers = no
>         map to guest = Bad User
>         max protocol = SMB2
>         min receivefile size = 16384
>         null passwords = yes
>         obey pam restrictions = yes
>         os level = 255
>         reset on zero vc = no
>         passdb backend = smbpasswd
>         preferred master = yes
>         printable = no
>         security = user
>         smb encrypt = disabled
>         smb passwd file = /etc/samba/smbpasswd
>         socket options = TCP_NODELAY IPTOS_LOWDELAY
>         syslog = 2
>         use sendfile = yes
>         wins support = yes
>         writeable = yes




--
Jim Reisert AD1C, <jjreisert@alum.mit.edu>, http://www.ad1c.us

Re: [Cerowrt-devel] [Bloat] Sharing Windows Files from wired to wireless (3.7.5-2)

[Jim Reisert AD1C]

On Wed, Jun 19, 2013 at 7:31 PM, Jim Reisert AD1C
<jjreisert@alum.mit.edu> wrote:

> I made the changes to smb.conf.template that Robert Bradley
> recommended and rebooted the router.
>
> OOOoooohhhh!!  I can see the shared desktop file systems from the
> wireless Windows 7 machine!!!!

I meant to add that I also performed the steps recommended here:

http://www.sevenforums.com/system-security/257798-windows-7-ipsec-vpn-client-firewall-configuration.html#post2136247

Now I have to try a different laptop on the network and see if I can
get to my wife's files.  Then I can truly declare victory.

--
Jim Reisert AD1C, <jjreisert@alum.mit.edu>, http://www.ad1c.us

Re: [Cerowrt-devel] [Bloat] Sharing Windows Files from wired to wireless (3.7.5-2)

[Robert Bradley]

On 20 June 2013 02:31, Jim Reisert AD1C <jjreisert@alum.mit.edu> wrote:
> I made the changes to smb.conf.template that Robert Bradley
> recommended and rebooted the router.
>
> OOOoooohhhh!!  I can see the shared desktop file systems from the
> wireless Windows 7 machine!!!!
>

It's probably worth seeing then if we can get "reset on zero vc = no"
added to the default smb.conf.template.  It might also be worth
pointing out the changes needed for multiple routers too, since only
one can be the WINS server (secondary routers have "wins support=no"
and "wins server=172.30.x.x" in smb.conf.template, and
/etc/config/dhcp entries use "44,172.30.x.x" instead of "44,0.0.0.0").

I also have a patch to luci-app-samba that allows you to set the
listening interfaces via the UI:

diff --git a/applications/luci-samba/luasrc/model/cbi/samba.lua
b/applications/luci-samba/luasrc/model/cbi/samba.lua
index 9152637..d5294b5 100644
--- a/applications/luci-samba/luasrc/model/cbi/samba.lua
+++ b/applications/luci-samba/luasrc/model/cbi/samba.lua
@@ -28,6 +28,15 @@ s:taboption("general", Value, "homes",
translate("Share home-directories"),
         translate("Allow system users to reach their home directories via " ..
                 "network shares"))

+net = s:taboption("general", Value, "interface", translate("Served
interfaces"))
+net.template = "cbi/network_netlist"
+net.widget   = "checkbox"
+net.nocreate = true
+
+function net.cfgvalue(self, section)
+        return m.uci:get("samba", section, "interface")
+        end
+
 tmpl = s:taboption("template", Value, "_tmpl",
     translate("Edit the template that is used for generating the
samba configuration."),
     translate("This is the content of the file
'/etc/samba/smb.conf.template' from which your samba configuration
will be generated. " ..

-----

Unfortunately, I expect Gmail will mangle the lines in that patch, but
it should be easy enough to fix.  The CeroWRT version of the file is
at /usr/lib/lua/luci/model/cbi/samba.lua if anyone wants to try adding
this manually.  For this to have any effect on Samba, you will need to
restore/uncomment the original "interfaces = |INTERFACES|" line in
smb.conf.template that my previous template set manually.
--
Robert Bradley