Originally Posted by chrisflynn
Update: I went to System Setting to Security Level and checked the box saying eth0 is a "trusted device".
If you do that you are effectively turning off your firewall by trusting all traffic in and out of that ethernet adaptor.
You need to open ports 137, 138, and 139 used by the NetBIOS service that windows and samba
(smb) use to talk to eachother. Only open these ports for your windows machine on your internal lan that you wish to see
$ iptables -A INPUT -p ALL -i eth0 -s 192.168.0.1 --destination-port 137:139 -j ACCEPT
If you're unfamiliar with iptables
, this will open traffic for all protocols (tcp, udp, icmp) to your local ethernet port 0 from ip 192.168.0.1 (your XP machine wanting to connect) on ports 137-139. Add additional lines for each ip address to be allowed to access or change to -s 192.168.0.0/24 which is the same as a 255.255.255.0 subnet mask to open up access from all IPs in the 192.168.0 range (or whatever private ip address range you're using on your lan).