#!/bin/sh
# network	: ipv6/mask || dns6/mask
#local network=""${network}";"${net6}";fe80::/64"

# clients	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# servers	: PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... |
# forward	: PROTO ; PORT |


#netbios-ns      137/tcp                         # NETBIOS Name Service
#netbios-ns      137/udp
#netbios-dgm     138/tcp                         # NETBIOS Datagram Service
#netbios-dgm     138/udp

local netbiosnsPort="$( iptoolsServicesGetPort udp netbios-ns )"
local netbiosdgmPort="$( iptoolsServicesGetPort udp netbios-dgm )"

#local  ruleEthIn="$ruleEthIn ;samba_srv	| -s "${net}" -d "${broadcast}"	-p udp --sport ${netbiosnsPort} --dport ${netbiosnsPort} -m state --state NEW,ESTABLISHED,RELATED"
#local  ruleEthIn="$ruleEthIn ;samba_srv	| -s "${net}" -d "${broadcast}"	-p udp --dport ${netbiosnsPort} -m state --state NEW,ESTABLISHED,RELATED"
##local  ruleEthIn="$ruleEthIn ;samba_srv	| -s "${net}" -d "${broadcast}"	-p udp --sport ${netbiosdgmPort} --dport ${netbiosdgmPort} -m state --state NEW,ESTABLISHED,RELATED"

#				-- CLIENT --
# [ UDP/TCP/DOMAIN ]
#local clients="$clients|UDP	;domain		;root/root;1000/1000"
#local clients="$clients|TCP	;domain		;root/root;1000/1000;Debian-exim/Debian-exim"

#				-- SERVER --
# SMB Server
#local servers="$servers|UDP	;netbios-ns	;root/root"
#local servers="$servers|UDP	;netbios-dgm	;root/root"

local servers="$servers|TCP	;microsoft-ds	"
#local servers="$servers|TCP	;microsoft-ds	;root:root"

#local netbiosdsPort="$( iptoolsServicesGetPort tcp microsoft-ds )"
#local  ruleOut="$ruleOut ;samba_srv	| -p tcp --sport ${netbiosdsPort} -m state --state NEW,ESTABLISHED,RELATED"

local servers="$servers|TCP	;netbios-ssn	;root/root"
local servers="$servers|TCP	;loc-srv	;root/root"

#local clients="$clients|TCP	;microsoft-ds	;root/root"
#local clients="$clients|TCP	;netbios-ssn	;root/root"
#local clients="$clients|TCP	;loc-srv	;root/root"
## SAMBA - ...
#local clients="$clients|TCP	;3268		;root/root"
#local servers="$servers|TCP	;3268		;root/root"
#local clients="$clients|TCP	;1024		;root/root"
#local servers="$servers|TCP	;1024		;root/root"

# ruleOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# ruleIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""
# dropOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# dropIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""