I'm setting up a web server with SSH access for the first time. I've been reading Securing & Optimizing Linux RH Ed and I'm using the IPCHAINS script out of that book. I want to connect to SSH from the internet then access my windowz shares without taking my firewall down. When I try to mount a windows share using: mount -t smbfs //windowz/share /mnt/smbmount -o username=username,password=password It says 'Connection to windowz failed' so obviously ports 137:139 and 445 are blocked. I've looked at the IPCHAINS man page, checked the howto and searched the web for suggestions. My server is at 192.168.1.200 and I want to be able to access my share at 192.168.1.101. This is what I think should work: ipchains -A input -i eth0 -p tcp -s 192.168.1.200 137:139 -d 192.168.1.101 137:139 -j ACCEPT ipchains -A input -i eth0 -p udp -s 192.168.1.200 137:139 -d 192.168.1.101 137:139 -j ACCEPT ipchains -A input -i eth0 -p tcp -s 192.168.1.200 445 -d 192.168.1.101 445 -j ACCEPT ipchains -A input -i eth0 -p udp -s 192.168.1.200 445 -d 192.168.1.101 445 -j ACCEPT I've tried many variations of these commands and nothing works. Would it be easier to simply allow any access between my server and the windowz machine I need to access? Any suggestions are welcome? Thanks, David