Firewalld is blocking Network/Samba Client in KDE/Dolphin

[CaptainCoward]

What happened

When trying to access a shared Folder (samba) of my other Computer via KDE/Dolphin/Network the access gets blocked by Firewalld. Even if i unblock every service it just refuses to work:

The Computer will be show up under Network yet i can't access it. This seems to be related to some DNS issue since smb://IP-Adress seems to work while smb://computername doesn't. As soon as i disable Firewalld i also will be able to connect via smb://computername.

What you expected to happen

be able to connect..

How to reproduce it (as minimally and precisely as possible)

Use KDE/Dolphin -> Network -> try to access shared folder PC via SMB by it's computername.

Anything else we need to know?

No response

Firewalld Version

2.1.0-1

Firewalld Backend

ntftables

Linux distribution

EndouverOS

Linux kernel version

6.7.0-arch3-1

Other information

No response

[erig0]

You want to use samba-client not samba.

[CaptainCoward]

That's not the issue. The computer that shares the folder with Samba has no firewall.It isn't the server that's blocking access. It's my "client" computer which uses Firewalld. As long as i have firewalld running i can't connect to the server.. i'm only able to see it in Dolphin/Network though can't access it. I even tried allowing literally all services yet access still is not possible. Firewalld prevents Dolphin from loading the Files. I have to disable firewalld-service after that it works. though it's super annoying to always kill firewalld first.

[erig0]

I'm aware that it's the client traffic that's being blocked. The samba-client service allows netbios-ns, which is what's being blocked according to your original report.

Perhaps you could give it a try?

I even tried allowing literally all services yet access still is not possible.

Can you enable --set-log-denied all, then look at the drop reports in dmesg ? That'll tell you what's being blocked.

[CaptainCoward]

I have done so but i have no clue what it means. These two lines seem to appear when i try to connect to the other computer. No clue if MAC is "good" to share so i removed it just in case.

STATE_INVALID_DROP: IN=enp42s0 OUT= MAC=xxx SRC=192.168.0.31 DST=192.168.0.33 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=30059 DF PROTO=TCP SPT=445 DPT=38298 WINDOW=249 RES=0x00 ACK FIN URGP=0 

filter_IN_home_REJECT: IN=enp42s0 OUT= MAC=xxx SRC=198.252.206.25 DST=192.168.0.33 LEN=113 TOS=0x00 PREC=0x00 TTL=47 ID=60435 DF PROTO=TCP SPT=443 DPT=35746 WINDOW=62 RES=0x00 ACK PSH URGP=0