Uci set firewall.samba_smb_nt.target= 'NOTRACK' Uci set firewall.samba_smb_nt.proto= 'tcp' Uci set firewall.samba_smb_nt.dest_port= '445' Uci set firewall.samba_smb_nt.dest= 'lan' Uci set firewall.samba_smb_nt.name= 'NoTrack-Samba/SMB' Uci set firewall.samba_ss_nt.target= 'NOTRACK' Uci set firewall.samba_ss_nt.proto= 'tcp' Uci set firewall.samba_ss_nt.dest_port= '139' Uci set firewall.samba_ss_nt.name= 'NoTrack-Samba/SS' Uci set firewall.samba_nsds_nt.target= 'NOTRACK' Uci set firewall.samba_nsds_nt.proto= 'udp' Uci set firewall.samba_nsds_nt.dest_port= '137-138' Uci set firewall.samba_nsds_nt.dest= 'lan' Uci set firewall.samba_nsds_nt.src= 'lan' Uci set firewall.samba_nsds_nt.name= 'NoTrack-Samba/NS/DS' Since netfilter tracks every connection, disable conntrack for Samba connections if you use NAT. Now edit your /etc/samba/smb.conf all you like without worrying they will be lost the next time you reboot! Then add the following lines to /etc/rc.local to allow smbd and nmbd to start at boot time, using /etc/samba/smb.conf as the configuration file Just bear in mind, that the uci config will overwrite the values configured with it (but not the whole configuration) at every boot up! If you want configure Samba directly with /etc/samba/smb.conf instead of /etc/config/samba, it is possible to make changes to the smb.conf survive a reboot using the procedure below.įirst, prevent OpenWrt from starting Samba at boot time, thus overwriting /etc/samba/smb.conf with the settings in the uci file /etc/config/samba:

There may be entries which do not have a counterpart in UCI (yet) and thus can only be configured that way. So, if for whatever reasons above configuration does not give you desired access to your configured shares, you can of course circumvent the uci system and hack the original Samba configuration files instead or in addition. Thus it can be very complicated to configure! It is also not the protocol of choice to accomplish that task in a Linux/Mac environment. Samba is the only built in way to share resources between computers running Microsoft Windows. etc /init.d /firewall restart Installation Uci set firewall.samba_smb.target= 'ACCEPT' Uci set firewall.samba_smb.dest_port= '445' Uci set firewall.samba_smb.name= 'Allow-Samba/SMB' Uci set firewall.samba_ss.target= 'ACCEPT' Uci set firewall.samba_ss.dest_port= '139' Uci set firewall.samba_ss.name= 'Allow-Samba/SS' Uci set firewall.samba_nsds.target= 'ACCEPT' Uci set firewall.samba_st_port= '137-138' Uci set firewall.samba_nsds.name= 'Allow-Samba/NS/DS' ( optional) Configure firewall for remote access (not needed for LAN access) see wiki for ports explanation:

Samba port