for SAMBA_CLIENT in ${MY_SAMBA_CLIENTS}; do
	      iptables -A INPUT -i $EXTERNAL_INTERFACE -p UDP \
	   --sport $UNPRIVPORTS --dport 137 -s $SAMBA_CLIENT -d $EXTERNAL_IP -j ACCEPT

	      iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p UDP -m state --state ESTABLISHED,RELATED \
	   --sport 137 --dport $UNPRIVPORTS -s $EXTERNAL_IP -d $SAMBA_CLIENT -j ACCEPT

	      iptables -A INPUT -i $EXTERNAL_INTERFACE -p UDP \
	   --sport $UNPRIVPORTS --dport 138 -s $SAMBA_CLIENT -d $EXTERNAL_IP -j ACCEPT

	      iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p UDP -m state --state ESTABLISHED,RELATED \
	   --sport 138 --dport $UNPRIVPORTS -s $EXTERNAL_IP -d $SAMBA_CLIENT -j ACCEPT

	      iptables -A INPUT -i $EXTERNAL_INTERFACE -p TCP \
	   --sport $UNPRIVPORTS --dport 139 -s $SAMBA_CLIENT -d $EXTERNAL_IP -j ACCEPT

	      iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p TCP -m state --state ESTABLISHED,RELATED \
	   --sport 139 --dport $UNPRIVPORTS -s $EXTERNAL_IP -d $SAMBA_CLIENT -j ACCEPT

	      iptables -A INPUT -i $EXTERNAL_INTERFACE -p TCP \
	   --sport $UNPRIVPORTS --dport 445 -s $SAMBA_CLIENT -d $EXTERNAL_IP -j ACCEPT

	      iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p TCP -m state --state ESTABLISHED,RELATED \
	   --sport 445 --dport $UNPRIVPORTS -s $EXTERNAL_IP -d $SAMBA_CLIENT -j ACCEPT
done