Windows wont play nice on my network

[blu_alchemist]

I have a large home network with everyone running windows xp pro. A firewall running ipcop, and a linux fileserver running linux and samba.

I have a terribly strange issue. Last night i was streaming content from my fileserver via samba like I have for months, closed the window I was browsing and when I went to my computer to load the mapped drive windows complains this:

An error occured while reconecting \\10.0.0.200\span The network location cannot be reached.

I unmapped the drive, rebooted, and the error never ciesed. I figured it was a windows issue so I reinstalled and everything worked fine, then suddenly i cannot connect again.

My samba log.m% file:

[2007/06/22 20:27:13, 1] smbd/service.c:make_connection_snum(1033) athlon64 (10.0.0.110) connect to service span initially as user blu (uid=33, g id=33) (pid 17175) [2007/06/22 20:29:55, 1] smbd/service.c:close_cnum(1230) athlon64 (10.0.0.110) closed connection to service span [2007/06/22 20:30:48, 1] smbd/service.c:make_connection_snum(1033) athlon64 (10.0.0.110) connect to service span initially as user blu (uid=33, g id=33) (pid 17520) [2007/06/22 21:02:58, 0] smbd/nttrans.c:call_nt_transact_ioctl(2483) call_nt_transact_ioctl(0x9009c): Currently not implemented. [2007/06/22 21:23:56, 1] smbd/service.c:close_cnum(1230) athlon64 (10.0.0.110) closed connection to service span [root@fileserver ~]# cat /var/log/samba/log.athlon64 [2007/06/22 20:27:13, 1] smbd/service.c:make_connection_snum(1033) athlon64 (10.0.0.110) connect to service span initially as user blu (uid=33, gid=33) (pid 17175) [2007/06/22 20:29:55, 1] smbd/service.c:close_cnum(1230) athlon64 (10.0.0.110) closed connection to service span [2007/06/22 20:30:48, 1] smbd/service.c:make_connection_snum(1033) athlon64 (10.0.0.110) connect to service span initially as user blu (uid=33, gid=33) (pid 17520) [2007/06/22 21:02:58, 0] smbd/nttrans.c:call_nt_transact_ioctl(2483) call_nt_transact_ioctl(0x9009c): Currently not implemented. [2007/06/22 21:23:56, 1] smbd/service.c:close_cnum(1230) athlon64 (10.0.0.110) closed connection to service span

Main samba log file:

[2007/06/22 12:43:05, 1] smbd/service.c:make_connection_snum(1033) vaio (10.0.0.111) connect to service span initially as user blu (uid=33, gid=33) (pid 29910) [2007/06/22 13:36:12, 1] smbd/service.c:close_cnum(1230) vaio (10.0.0.111) closed connection to service span [2007/06/22 13:36:14, 0] smbd/server.c:main(944) smbd version 3.0.25-2.fc7 started. Copyright Andrew Tridgell and the Samba Team 1992-2007 [2007/06/22 13:36:15, 0] lib/util_sock.c:get_peer_addr(1232) getpeername failed. Error was Transport endpoint is not connected [2007/06/22 13:36:15, 0] lib/util_sock.c:get_peer_addr(1232) getpeername failed. Error was Transport endpoint is not connected [2007/06/22 13:36:15, 0] lib/util_sock.c:write_data(562) write_data: write failure in writing to client 0.0.0.0. Error Connection reset by peer [2007/06/22 13:36:15, 0] lib/util_sock.c:send_smb(769) Error writing 4 bytes to client. -1. (Connection reset by peer) [2007/06/22 13:36:15, 1] smbd/service.c:make_connection_snum(1033) vaio (10.0.0.111) connect to service span initially as user blu (uid=33, gid=33) (pid 32194) [2007/06/22 14:01:53, 1] smbd/service.c:close_cnum(1230) vaio (10.0.0.111) closed connection to service span [2007/06/22 14:01:56, 0] smbd/server.c:main(944) smbd version 3.0.25-2.fc7 started. Copyright Andrew Tridgell and the Samba Team 1992-2007

Smb.conf file:

[global] workgroup = crymson.corp netbios name = fileserver #server string = fileserver encrypt passwords = yes security = user wins support = yes smb passwd file = /var/lib/samba/private/smbpasswd log file = /var/log/samba/log.%m local master = yes preferred master = yes os level = 75 [span] path = /mnt/span/ public = yes read only = no browseable = yes valid users = mike, blu write list = mike, blu security mask = 0770 create mask = 0770 force create mode = 0770 directory mode = 0770 force directory mode = 0770 [log_cache] path = /mnt/server_logs/ public = yes read only = no browseable = yes valid users = mike, blu write list = mike, blu security mask = 0770 create mask = 0770 force create mode = 0770 directory mode = 0770 force directory mode = 0770

I also notice that when the error occurs I can no longer access any windows-to-windows shares either. The network becomes completely unbrowseable and rewriting arp tables and lan drivers dones nothing.

Anyone heard of this type of error or have any reccomendations??

### I should note that this only happens on my windows xp box. My vaio laptop running vista has no issues and samba has never once not been accesable from it. Even when my main machine '10.0.0.110' is being refused all the other machines run fine.

[jason.b.c]

I have a large home network with everyone running windows xp pro. A firewall running ipcop, and a linux fileserver running linux and samba.

sounds like maybe an "IP Cop" config problem..

I unmapped the drive, rebooted, and the error never ciesed. I figured it was a windows issue so I reinstalled and everything worked fine, then suddenly i cannot connect again.

you re-installed "what..? " exactly..? , Windows..? I hope not...

[iceblu]

OP here, forum would allow me to use blu_alchemist and wont resend my password but im back.

Reinstall? Windows of course, not like it ever runs like it should after a few months anyways.

After many kernel debuggers and hours on IRC i have discovered that their is something malicious blocking the service 'server'.

# netstat -nao | find "445" <<--- ports 445 is required to enable file and folder sharing, without it open windows cannot even connect to its own shares when browsing 'network neighborhood'.

file and folder sharing and that port 445 is opened and managed by the service 'server' # net restart server <<---- i can start/stop the service without difficulty but something seems to have changed that service.

C:\WINDOWS\system32\svchost.exe -k netsvcs, everythin worked perfectly untill i started unzipping a massive file i had made previously, while unzipping the program error confermation poped up saying svchost crashed and once again I cant see or use anything on the network.

How do i re-configure the net server service??? any idea what the heck is constantly causing this??

EDIT - the service 'computer browser' is what actual does the work when accessing directories remotly but it runs perfectly fine, when net server crashes it brings computer browser with it, when their all restarted if that port 445 isnt opened computer browser is pointless.

And yes i have run a virus/malware/everything scan avg,avira,kaspersky,norton,MS,like 10 programs and none of them find a single thing... almost sounds like a maltious broadcast thats DoSing that service and on overflow corrupts.