gufw and Windows shares

[Yaron Sheffer]

gufw by default does not allow Nautilus to see Windows shares (seen on a home network, Windows is a non-domain Win7 machine). This is widely reported, see https://answers.launchpad.net/gui-ufw/+question/72444. I think the default policy should allow it, but even with the current policy, gufw should provide an easy way to install the relevant rules (just adding the Samba Service does not work).

Importance: many people probably disable the firewall altogether because Windows access is important to them, and the configuration is difficult.

Workaround:

- Download application profiles from http://jhansonxi.blogspot.com/2010/10/ufw-application-profiles.html into /etc/ufw/applications.d/

sudo ufw enable
sudo ufw allow samba
sudo ufw allow from any app Samba

Thanks!

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: gufw 11.10.2-0ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-15.26-generic 3.0.13
Uname: Linux 3.0.0-15-generic x86_64
ApportVersion: 1.23-0ubuntu4
Architecture: amd64
Date: Thu Jan 26 10:40:55 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
PackageArchitecture: all
SourcePackage: gui-ufw
UpgradeStatus: No upgrade log present (probably fresh install)

[costales (costales)]

Hi, I'm not sure about the risk of this:
sudo ufw allow from any app Samba
Any help please? :)
Thanks Yaron :)

[DarkRedman (darkredman-deactivatedaccount)]

It's risky I think it mustn't be enabled by default but it could be great to put a checkbox to activate it in a GUFW wizard (eg. https://bugs.launchpad.net/gui-ufw/+bug/808902)

What do you think about ?

[Yaron Sheffer (yaronf)]

I fully agree.

On 03/27/2012 02:43 PM, DarkRedman wrote:
> It's risky I think it mustn't be enabled by default but it could be
> great to put a checkbox to activate it in a GUFW wizard (eg.
> https://bugs.launchpad.net/gui-ufw/+bug/808902)
>
> What do you think about ?
>

[Tye (tye3ow)]

to allow Samba access from my network I use:
sudo ufw allow from 192.168.0.0/24 to any port 137:139,445 proto tcp
sudo ufw allow from 192.168.0.0/24 to any port 137:139,445 proto udp

the Samba profile doesn't include port 445 which may cause some functionality to fail with some Windows boxes. obviously replace '192.168.0.0/24' with the range of IPs on your network.

[costales (costales)]

Hi Tye,
> sudo ufw allow from 192.168.0.0/24 to any port 137:139,445 proto tcp
I'm seeing 445 port :O