Hello,

I am new to samba and i would to well secure it.

In smb.conf, I entered the following lines :

hosts allow = 192.168.0.2 127.0.0.1
hosts deny = 0.0.0.0/0
bind interfaces only = yes
interfaces = eth0 lo

I thought that it would only listens on the local machine and my internal Lan (which 
is on eth0 192.168.0.1) but nmbd seems to always listen on UDP/137 and UDP/138 
(netbios-ns and netbios-dgm) on 0.0.0.0/0. Here is the output of netstat :

[EMAIL PROTECTED] user]# netstat -taup
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address                     Foreign Address     State     
PID/Program name
tcp     0             0         192.168.0.1:netbios-ssn         *:*                    
 LISTEN     3800/smbd
tcp     0             0         ServeurLinu:netbios-ssn         *:*                    
 LISTEN     3800/smbd
tcp     0             0        ServeurLinux:ipp                    *:*                 
    LISTEN     3707/cupsd
tcp     0             0         192.168.0.:microsoft-ds         *:*                    
 LISTEN     3800/smbd
tcp     0             0         ServeurLin:microsoft-ds         *:*                    
 LISTEN     3800/smbd
udp     0             0        192.168.0.1:netbios-ns         *:*                      
                   3804/nmbd
udp     0             0        *:netbios-ns                         *:*                
                         3804/nmbd
udp     0             0         192.168.0.1:netbios-dgm     *:*                        
                 3804/nmbd
udp     0             0         *:netbios-dgm                         *:*              
                          3804/nmbd


What is netbios-ns and netbios-dgm? I would prefer that nmbd doesn't listen on 
*:netbios-ns and *:netbios-dgm because I will connect my server to the internet 
through eth1 10.0.0.1. How can I do it?

Thanks for any help.

Jean Lee.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to