#!/bin/sh
# network	: ipv4.ipv4.ipv4.ipv4/mask || dns/mask
local network="${net}"

#netbios-ns      137/tcp                         # NETBIOS Name Service
#netbios-ns      137/udp
#netbios-dgm     138/tcp                         # NETBIOS Datagram Service
#netbios-dgm     138/udp

local netbiosnsPort="$( iptoolsServicesGetPort udp netbios-ns )"
local netbiosdgmPort="$( iptoolsServicesGetPort udp netbios-dgm )"

# [ 2332.623144] NETFILTER_INPUTIN=eth0.1 OUT= MAC=ff:ff:ff:ff:ff:ff:70:85:c2:4d:42:68:08:00
# SRC=10.90.6.171 DST=10.90.6.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=57495 PROTO=UDP SPT=137 DPT=137 LEN=58 MARK=0xd
local  dropEthIn="$dropEthIn ;samba_srv	| -s "${net}" -d "${broadcast}"	-p udp --sport "${netbiosnsPort}" --dport "${netbiosnsPort}" -m state --state NEW"
#[17826.143785] NETFILTER_INPUTIN=eth0.2 OUT= MAC=ff:ff:ff:ff:ff:ff:dc:4a:3e:e6:8d:2d:08:00
# SRC=10.83.10.7 DST=10.83.10.255 LEN=229 TOS=0x00 PREC=0x00 TTL=128 ID=35616 PROTO=UDP SPT=138 DPT=138 LEN=209 MARK=0xe
local  dropEthIn="$dropEthIn ;samba_srv	| -s "${net}" -d "${broadcast}"	-p udp --sport "${netbiosdgmPort}" --dport "${netbiosdgmPort}" -m state --state NEW"

# clients	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# servers	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# forward	: PROTO ; PORT |

# SAMBA
#local clients="$clients|UDP	;netbios-ns	;root/root"
#local clients="$clients|UDP	;netbios-dgm	;root/root"