Re: Close ports 137 and 138 samba server?

From: James Carter (jcarter_at_mindmerge.net)
Date: 06/24/04

  • Next message: Monty Ree: "just running tcpdump makes promisc mode?" 
    To: focus-linux@securityfocus.com
Date: Wed, 23 Jun 2004 18:35:00 -0700

    On Wednesday 23 June 2004 13:23, listassec@yahoo.com wrote:
    > Hi,
    >
    > I have a linux box with samba server and two network interface. One
    > interface for internet and another for local network. I used the samba
    > commands:
    > bind interface only true
    > interfaces 192.168.10.1/24
    >
    > And the samba stop to listen on internet interface on port 139, but it
    > continue listening on ports 137 and 138 on both interface. How to stop
    > listen on this ports on internet interface only?
    > I´m using iptables to filter this ports, but i´d like to close this
    > ports on interface.
    >
    > Thanks in advance!

    From the samba docs it looks like you may want to format the configuration a
    bit different.

    If you look at this link:
    http://www.samba.org/samba/docs/man/howto/securing-samba.html#id2542478

    and then look at the sections titled:
    "Using Interface Protection"

    The example is: 

    ---
interfaces = eth* lo
bind interfaces only = yes
---
Looking at this example I think that if you were to include 'only' the 
interfaces you want to use perhaps eth0, lo and not include eth1 then I think 
that would work. This may be too simple, maybe not. 
*DISCLAIMER: 
I am not a Samba guru, this is merely my assessment of what I see in the 
documentation. 
Best of luck, let us know what works.
-- 
James Carter
jcarter@mindmerge.net
http://www.mindmerge.net
  • Next message: Monty Ree: "just running tcpdump makes promisc mode?"

    Relevant Pages