Skip to content

docs(media): the 445 pass exists and a Hicks workstation mounts the share (#523) - #654

Merged
Gerrrt merged 1 commit into
mainfrom
gerrrt/smb-pass-created-523
Sep 23, 2026
Merged

Gerrrt merged 1 commit into
mainfrom
gerrrt/smb-pass-created-523

Conversation

@Gerrrt

@Gerrrt Gerrrt commented Sep 23, 2026

Copy link
Copy Markdown
Owner

Closes #523

This is the step #650 left for after the hands-on work: build-the-nas.md §5 Workstations is done, so the documents move from specified to created in one commit, as 4533 did.

Evidence, read 2026-09-23

  • User and mount: samwise exists on smaug, and a Windows PC on Hicks mounted \\10.0.40.30\media as samwise (reported by the operator).
  • Position, from morpheus with pfctl -sr: on igc0.50 the order is Allow HTTPS, Allow 8096, Allow 4533, Allow SMB to smaug (port = microsoft-ds), then Block access to CasaBonita. pfctl -sr -vv shows the SMB pass has matched 463 packets, 1 state.
  • Still refused: nc -z -w3 10.0.40.30 445 from the monitoring host fails.
  • Tripwire: the TerminalSegmentReachedInternalNetwork cannot fire — the firewall logs blocks only #223 rule on igc0.40 reads Packets: 0.

What changes

  • build-the-nas.md §5's note gets a Done block, and §0.5's pass list says the pass was created.
  • network.md, security.md, architecture.md and stacks/media/README.md now say created 2026-09-23. network.md reads "Six exist today".
  • Audiobookshelf's 13378 becomes the seventh wherever it is counted. The dated Done block for 4533 in §6.6 keeps its original wording, because it is a record of that day.
  • The roadmap's The media share exists and no workstation can mount it: 445 from Hicks is not a rule #523 entry is removed, and the changelog has an entry for today.

scripts/validate.sh: all checks passed.

🤖 Generated with Claude Code

…hare (#523)

build-the-nas.md §5 Workstations is done. samwise exists on smaug, and
Allow SMB to smaug was created on morpheus. A Windows PC on Hicks mounted
\\10.0.40.30\media as samwise. Read from morpheus, the pass sits above
Block access to CasaBonita on igc0.50 and has matched 463 packets. The
monitoring host is still refused on 445, and the #223 tripwire on igc0.40
still reads 0 packets.

network.md, security.md, architecture.md, stacks/media/README.md and §5
move from specified to created in one commit, as 4533 did. Six passes to
smaug exist now, so 13378 becomes the seventh wherever it is counted. The
roadmap entry goes, and the changelog records the day.

Closes #523

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@Gerrrt
Gerrrt merged commit 455475a into main Sep 23, 2026
4 checks passed
@Gerrrt
Gerrrt deleted the gerrrt/smb-pass-created-523 branch September 23, 2026 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

The media share exists and no workstation can mount it: 445 from Hicks is not a rule

1 participant