#!/bin/sh
# network	: ipv4.ipv4.ipv4.ipv4/mask || dns/mask
local network="${net}"

#netbios-ns      137/tcp                         # NETBIOS Name Service
#netbios-ns      137/udp
#netbios-dgm     138/tcp                         # NETBIOS Datagram Service
#netbios-dgm     138/udp

local netbiosnsPort="$( iptoolsServicesGetPort udp netbios-ns )"
local netbiosdgmPort="$( iptoolsServicesGetPort udp netbios-dgm )"

# [ 2332.623144] NETFILTER_INPUTIN=eth0.1 OUT= MAC=ff:ff:ff:ff:ff:ff:70:85:c2:4d:42:68:08:00
# SRC=10.90.6.171 DST=10.90.6.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=57495 PROTO=UDP SPT=137 DPT=137 LEN=58 MARK=0xd
local  ruleEthIn="$ruleEthIn ;smb_clt	| -s "${net}" -d "${broadcast}"	-p udp --sport ${netbiosnsPort} --dport ${netbiosnsPort} -m state --state NEW,ESTABLISHED,RELATED"
#[17826.143785] NETFILTER_INPUTIN=eth0.2 OUT= MAC=ff:ff:ff:ff:ff:ff:dc:4a:3e:e6:8d:2d:08:00
# SRC=10.83.10.7 DST=10.83.10.255 LEN=229 TOS=0x00 PREC=0x00 TTL=128 ID=35616 PROTO=UDP SPT=138 DPT=138 LEN=209 MARK=0xe
local  ruleEthIn="$ruleEthIn ;smb_clt	| -s "${net}" -d "${broadcast}"	-p udp --sport ${netbiosdgmPort} --dport ${netbiosdgmPort} -m state --state NEW,ESTABLISHED,RELATED"

# NETFILTER_INPUTIN=enp9s0 OUT= MAC= SRC=10.90.6.107 DST=10.90.6.255 LEN=247 TOS=0x00 PREC=0x00 TTL=64 ID=8934 DF PROTO=UDP SPT=138 DPT=138 LEN=227 MARK=0x12

# clients	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# servers	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# forward	: PROTO ; PORT |

# SAMBA
local clients="$clients|TCP	;microsoft-ds	;root/root"
local clients="$clients|UDP	;netbios-ns	;root/root"
local clients="$clients|UDP	;netbios-dgm	;root/root"