gufw and Windows shares

Reported by Yaron Sheffer on 2012-01-26
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Gufw
Undecided
Unassigned
gui-ufw (Ubuntu)
Undecided
Unassigned

Bug Description

gufw by default does not allow Nautilus to see Windows shares (seen on a home network, Windows is a non-domain Win7 machine). This is widely reported, see https://answers.launchpad.net/gui-ufw/+question/72444. I think the default policy should allow it, but even with the current policy, gufw should provide an easy way to install the relevant rules (just adding the Samba Service does not work).

Importance: many people probably disable the firewall altogether because Windows access is important to them, and the configuration is difficult.

Workaround:

- Download application profiles from http://jhansonxi.blogspot.com/2010/10/ufw-application-profiles.html into /etc/ufw/applications.d/

sudo ufw enable
sudo ufw allow samba
sudo ufw allow from any app Samba

Thanks!

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: gufw 11.10.2-0ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-15.26-generic 3.0.13
Uname: Linux 3.0.0-15-generic x86_64
ApportVersion: 1.23-0ubuntu4
Architecture: amd64
Date: Thu Jan 26 10:40:55 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
PackageArchitecture: all
SourcePackage: gui-ufw
UpgradeStatus: No upgrade log present (probably fresh install)

Yaron Sheffer (yaronf) wrote :
costales (costales) wrote :

Hi, I'm not sure about the risk of this:
sudo ufw allow from any app Samba
Any help please? :)
Thanks Yaron :)

Changed in gui-ufw (Ubuntu):
status: New → Invalid
DarkRedman (darkredman) wrote :

It's risky I think it mustn't be enabled by default but it could be great to put a checkbox to activate it in a GUFW wizard (eg. https://bugs.launchpad.net/gui-ufw/+bug/808902)

What do you think about ?

I fully agree.

On 03/27/2012 02:43 PM, DarkRedman wrote:
> It's risky I think it mustn't be enabled by default but it could be
> great to put a checkbox to activate it in a GUFW wizard (eg.
> https://bugs.launchpad.net/gui-ufw/+bug/808902)
>
> What do you think about ?
>

costales (costales) on 2012-05-02
Changed in gui-ufw:
status: New → Fix Committed
costales (costales) on 2012-07-13
Changed in gui-ufw:
status: Fix Committed → Fix Released
Tye (tye3ow) wrote :

to allow Samba access from my network I use:
sudo ufw allow from 192.168.0.0/24 to any port 137:139,445 proto tcp
sudo ufw allow from 192.168.0.0/24 to any port 137:139,445 proto udp

the Samba profile doesn't include port 445 which may cause some functionality to fail with some Windows boxes. obviously replace '192.168.0.0/24' with the range of IPs on your network.

costales (costales) wrote :

Hi Tye,
> sudo ufw allow from 192.168.0.0/24 to any port 137:139,445 proto tcp
I'm seeing 445 port :O

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers