#Alan's mount on U35WF
//192.168.1.101/2TBhdd /mnt/U35WF/alan cifs credentials=/home/alan/.smbcredentials,iocharset=utf8,sec=ntlm,uid=1000,gid=1000 0 0
#Bella's mount of U35WF
//192.168.1.101/2TBhdd /mnt/U35WF/bella cifs credentials=/home/bella/.smbcredentials,iocharset=utf8,sec=ntlm,uid=1001,gid=1001 0 0[global]
netbios name = LEDE
display charset = UTF-8
interfaces = 127.0.0.1/8 lo 192.168.1.101/24 br-lan
server string = LEDE on U35WF
unix charset = UTF-8
workgroup = WORKGROUP
local master = no
browseable = yes
deadtime = 30
domain master = yes
encrypt passwords = yes
enable core files = no
guest ok = yes
invalid users = root
load printers = no
map to guest = Bad User
max protocol = SMB2
min receivefile size = 16384
null passwords = yes
passdb backend = smbpasswd
preferred master = yes
security = user
smb passwd file = /etc/samba/smbpasswd
syslog = 2
use sendfile = yes
writeable = yes
bind interfaces only = yes
[homes]
comment = Home Directories
browsable = no
read only = no
create mode = 0750
[2TBhdd]
path = /mnt/2TBhdd
valid users = alan bella
read only = no
guest ok = no
create mask = 0660
directory mask = 0750
[Alan]
path = /mnt/2TBhdd/alan
valid users = alan
read only = no
guest ok = no
create mask = 0660
directory mask = 0750
[Bella]
path = /mnt/2TBhdd/bella
valid users = bella
read only = no
guest ok = no
create mask = 0660
directory mask = 0750sudo mount //192.168.1.101/2TBhdd /mnt/U35WF/alan -t cifs -o credentials=/home/alan/.smbcredentials,uid=1000,gid=1000
mount error(22): Invalid argument[ 8458.126450] No dialect specified on mount. Default has changed to a more secure dialect, SMB3 (vers=3.0), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3 specify vers=1.0 on mount. For somewhat newer servers such as Windows 7 try vers=2.1.
[ 8458.131309] CIFS VFS: cifs_mount failed w/return code = -22sudo su
echo 7 > /proc/fs/cifs/cifsFYI
dmesg | tail
[ 8509.743356] No dialect specified on mount. Default has changed to a more secure dialect, SMB3 (vers=3.0), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3 specify vers=1.0 on mount. For somewhat newer servers such as Windows 7 try vers=2.1.
[ 8509.747964] Status code returned 0xc000000d STATUS_INVALID_PARAMETER
[ 8509.747991] CIFS VFS: cifs_mount failed w/return code = -22alan@Desktop: ~ $ sudo mount -t cifs //192.168.1.101/2TBhdd /mnt/U35WF/2TBhdd --verbose -o credentials=/home/alan/.smbcredentials,vers=3.0
mount.cifs kernel mount options: ip=192.168.1.101,unc=\\192.168.1.101\2TBhdd,vers=3.0,user=alan,pass=********
mount error(22): Invalid argument
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
FAIL: 32
alan@Desktop: ~ $ sudo mount -t cifs //192.168.1.101/2TBhdd /mnt/U35WF/2TBhdd --verbose -o credentials=/home/alan/.smbcredentials,vers=2.1
mount.cifs kernel mount options: ip=192.168.1.101,unc=\\192.168.1.101\2TBhdd,vers=2.1,user=alan,pass=********
mount error(22): Invalid argument
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
FAIL: 32Status code returned 0xc000000d STATUS_INVALID_PARAMETER
CIFS VFS: cifs_mount failed w/return code = -22#In [global] section
min protocol = SMB2
max protocol = SMB2Server: 192.168.1.1
Address: 192.168.1.1#53
Name: hostname
Address: 192.168.1.5
Name: hostname
Address: 192.168.1.5ping: hostname: Name or service not known# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
# 127.0.0.53 is the systemd-resolved stub resolver.
# run "systemd-resolve --status" to see details about the actual nameservers.
nameserver 192.168.1.1
nameserver fe80::1
nameserver 127.0.0.53...
//192.168.1.160/BACKUP /mnt/BACKUP cifs iocharset=utf8,credentials=/.smbcredentials,uid=1000,nofail 0 0
...$ sudo mount -v -a
mount.cifs kernel mount options: ip=192.168.1.160,unc=\\192.168.1.160\BACKUP,iocharset=utf8,uid=1000,user=luke,pass=********
mount error(112): Host is down
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)CIFS VFS: cifs_mount failed w/return code = -112$ nmap -p 445 192.168.1.160 -P0
Starting Nmap 7.60 ( https://nmap.org ) at 2017-10-22 12:34 CEST
Nmap scan report for computer.station (192.168.1.160)
Host is up (0.00027s latency).
PORT STATE SERVICE
445/tcp open microsoft-ds
Nmap done: 1 IP address (1 host up) scanned in 0.06 secondsuser@ubuntu:/etc/openvpn $ sudo systemctl start openvpn@vpn.service
Failed to enable unit: Unit file openvpn@vpn.service does not exist.user@ubuntu:/etc/openvpn $ ls
ca.crt vpn.conf client.crt client.key update-resolv-confuser@ubuntu:/etc/openvpn $ systemctl list-unit-files --type=service | ag 'openvpn'
openvpn.service maskeduser@ubuntu:~ $ systemctl list-unit-files --type=service | ag 'openvpn'
openvpn.service generated#!/bin/bash
#On flush les anciennes règles
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
#On autorise les requêtes local
sudo iptables -A INPUT -i lo -j ACCEPT
#On autorise les requêtes DNS
sudo iptables -t filter -A OUTPUT -p tcp --dport 53 -j ACCEPT
sudo iptables -t filter -A OUTPUT -p udp --dport 53 -j ACCEPT
sudo iptables -t filter -A INPUT -p tcp --dport 53 -j ACCEPT
sudo iptables -t filter -A INPUT -p udp --dport 53 -j ACCEPT
#On autorise le ping pour eth0 et wlan0
sudo iptables -A INPUT -i eth0 -p icmp -j ACCEPT
sudo iptables -A INPUT -i wlan0 -p icmp -j ACCEPT
#On autorise le ssh pour eth0 et wlan0
sudo iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
sudo iptables -A INPUT -i wlan0 -p tcp --dport 22 -j ACCEPT
#On envoie tous le traffic vers le tunnel VPN
sudo iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
sudo iptables -A FORWARD -i eth0 -o tun0 -j ACCEPT
sudo iptables -A FORWARD -i tun0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
#On envoie tous le traffic de wlan0 vers le tunnel
sudo iptables -A FORWARD -i tun0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i wlan0 -o tun0 -j ACCEPT
sudo iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#On jette tous le reste
sudo iptables -P FORWARD DROP
sudo iptables -P INPUT DROP
#On sauvegarde les règles persistentes
sudo systemctl enable netfilter-persistenthttp://paste.ubuntu.com/25795955/