[Samba] what is nmbd doing on all interfaces?

[Thiago Lima]

Man smb.conf

              For  name service it causes nmbd to bind to ports 137 and 138
on
              the interfaces listed in the  interfaces  parameter.  nmbd
also
              binds  to  the  "all addresses" interface (0.0.0.0) on ports
137
              and 138 for the purposes of reading broadcast messages. If
this
              option is not set then nmbd will service name requests on all
of
              these sockets. If bind interfaces only is  set  then  nmbd
will
              check  the source address of any packets coming in on the
broad-
              cast sockets and discard any  that  don't  match  the
broadcast
              addresses of the interfaces in the interfaces parameter list.
As
              unicast packets are received on the other sockets it allows
nmbd
              to  refuse  to  serve  names  to machines that send packets
that
              arrive through any interfaces not listed in the interfaces
list.
              IP  Source  address spoofing does defeat this simple check,
how-
              ever, so it must not be used seriously as a security feature
for
              nmbd.
 

>-----Original Message-----
>From: samba-bounces+thiagolima=webforce.com.br at lists.samba.org 
>[mailto:samba-bounces+thiagolima=webforce.com.br at lists.samba.or
>g] On Behalf Of thomas k.
>Sent: Thursday, February 05, 2004 10:11 PM
>To: samba at lists.samba.org
>Subject: [Samba] what is nmbd doing on all interfaces?
>
>hi,
>
>i just noticed the following running netstat:
>
>udp        0      0 192.168.1.100:137       0.0.0.0:*     19862/nmbd
>udp        0      0 0.0.0.0:137             0.0.0.0:*     19862/nmbd
>udp        0      0 192.168.1.100:138       0.0.0.0:*     19862/nmbd
>udp        0      0 0.0.0.0:138             0.0.0.0:*     19862/nmbd
>
>in my smb.conf i got:
>
>   interfaces = eth0
>   bind interfaces only = yes
>
>so what is nmbd doing on all interfaces? i hope it is not 
>trying to reach other samba servers out there or is it?
>
>thomas
>
>
>
>
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba