[Samba] Re: hosts allow on smb.conf

[Daniel Sung]

Thanks for your reply,

We are use ipsec vpn tunnel, so it has no 'virtual' IP Address during 
connect.  Ie : when client connect from Hotel, he is directly using the 
Hotel LAN IP to connect back, so this is really hard to configure 'hosts 
allow'.  My question is if I leave it blank, any security issue I need 
to concern.  Fyi, our samba hasn't enable the guest account, so when 
every time client computer access the share folder, it still need to 
pass the authentication first.

Please advice.

B.Rgds

Daniel Sung
Information Technology - Shipco Transport

Tel : +852 2574 3188 (General Lines)
Tel : +852 2574 7274 (Direct Line)
Fax : +852 2573 3936
e-mail : dsung at shipco.com

*** For access to STI-Online which offers on-line schedules, bookings, documentation, shipment tracking and other e-commerce tools, please visit our website, www.shipco.com ***



-------- Original Message  --------
Subject: Re:[Samba] Re: hosts allow on smb.conf
From: Rashkae <rashkae at tigershaunt.com>
To: Daniel Sung <dsung at shipco.com>
Cc: samba at lists.samba.org, Niklas Palmqvist <npalmqvist at shipco.com>
Date: Thu Mar 01 2007 05:11:03 GMT+0800 (China Standard Time)
> Daniel Sung wrote:
>
>>> Hi,
>>>
>>> I have some query about the samba security, we are trying to setup 
>>> remote map drive for vpn client, since this kind of client 
>>> connection which using different IP address,  the only way we can do 
>>> is to set 'hosts allow' to nothing.  
>>
>
> If your VPN setup is anything like those I'm familiar with, your 
> clients should be connecting with a 'virtual' tunneled IP address.  
> That's the IP you need hosts allow to allow, not the actual Internet 
> address.
>
>