[Bloat] Fwd: Sharing Windows Files from wired to wireless (3.7.5-2)

[Robert Bradley]

Resending this to the list as plain-text-only to hopefully avoid the
"no numeric URL" bounce.

On 18 June 2013 06:13, Dave Taht <dave.taht at gmail.com> wrote:
>
> On Mon, Jun 17, 2013 at 10:09 PM, Jim Reisert AD1C
> <jjreisert at alum.mit.edu> wrote:
> > On the wired Windows machine.  I got this error:
> >
> > f:\> netsh advfirewall firewall set rule group="File and Printer
> > Sharing" new enable=Yes remoteip=172.30.4
> > 2.0/24
>
> Your network is on the default 172.30.42.X ips?
>
> > "Only the enable parameter can be used to update rules specified by a group."
>
> No clue


It sound like you need to drop the "remoteip" part of that command and
use it with these four extras from
http://www.sevenforums.com/system-security/257798-windows-7-ipsec-vpn-client-firewall-configuration.html#post2136247
instead:

netsh advfirewall firewall set rule name="File and Printer Sharing
(NB-Session-In)" new remoteip=172.30.42.0/24,LocalSubnet
netsh advfirewall firewall set rule name="File and Printer Sharing
(NB-Name-In)" new remoteip=172.30.42.0/24,LocalSubnet
netsh advfirewall firewall set rule name="File and Printer Sharing
(NB-Datagram-In)" new remoteip=172.30.42.0/24,LocalSubnet
netsh advfirewall firewall set rule name="File and Printer Sharing
(Echo Request - ICMPv4-In)" new remoteip=172.30.42.0/24,LocalSubnet

>
> >
> > I got the same thing on the wireless Windows 7 machine.  I still can't
> > see shared folders.  NetBIOS over TCP is enabled on both.
>
> Can you see the shared folder you setup on the cero box?


Other things to check:

- If you're using Windows 7, you may well want/need to add "reset on
zero vc = no" to /etc/smb.conf.template too, since that seems to
prevent errors running "net view".
- For me at least, the "interfaces=|INTERFACES|" line seems to get
expanded as loopback only.  You may need to replace this with
"interfaces = 127.0.0.1/8 lo lo 172.30.42.1/27 172.30.42.65/27
172.30.42.97/27" or  interfaces = 127.0.0.1/8 lo lo se00 sw00 sw10" to
work around this.

For reference, my current smb.conf.template is as follows, and Windows
7 browsing works even in peer-peer (WINS-only) mode:

[global]
        netbios name = |NAME|
        display charset = |CHARSET|
#       interfaces = |INTERFACES|
        interfaces = 127.0.0.1/8 lo lo 172.30.42.1/27 172.30.42.65/27
172.30.42.97/27
        server string = |DESCRIPTION|
        unix charset = |CHARSET|
        workgroup = |WORKGROUP|
        browseable = yes
        deadtime = 30
        domain master = yes
        encrypt passwords = true
        enable core files = no
        guest account = nobody
        guest ok = yes
        invalid users = root
        local master = yes
        load printers = no
        map to guest = Bad User
        max protocol = SMB2
        min receivefile size = 16384
        null passwords = yes
        obey pam restrictions = yes
        os level = 255
        reset on zero vc = no
        passdb backend = smbpasswd
        preferred master = yes
        printable = no
        security = user
        smb encrypt = disabled
        smb passwd file = /etc/samba/smbpasswd
        socket options = TCP_NODELAY IPTOS_LOWDELAY
        syslog = 2
        use sendfile = yes
        wins support = yes
        writeable = yes

--
Robert Bradley