1) add user:
#sudo smbpasswd -a smbuser
#sudo smbpasswd -e smbuser (enable user)
2) sample configuration
# Global parameters
[global]
server string = Samba Server
workgroup = MYGROUP
log file = /var/log/samba/%m.log
max log size = 50
;disable spoolss = yes
;load printers = no
;printcap name = /dev/null
ntlm auth = yes
security = user
dns proxy = no
create mask = 0644
hosts allow = 192.168.0. 10. 127.
# Not allow home access
;[homes]
; comment = Home Directories
; browseable = no
; writable = yes
; invalid users = root smbuser
[writedir]
comment = 203data
path = /srv/data2/ftp/
browseable = no
valid users = smbuser
writable = yes
[readdir]
comment = 203
path = /srv/data2/ftp/
browseable = yes
valid users = smbuser
writable = no
[tmp]
comment = Temporary file space
browseable = no
path = /srv/data1/tmp
valid users = smbuser
;access as the default guest user
;If this parameter is yes for a service, then no password is required to connect to the service
;guest ok = yes
;If this parameter is yes for a service,
;then only guest connections to the service are permitted.
;This parameter will have no effect if guest ok is not set for the service.
;guest only = yes
writable = yes
3) iptables
# for samba
-A INPUT -m state --state NEW -m tcp -p tcp --dport 139 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 445 -j ACCEPT
That's all!