hosts allow/deny not working correctly

M. Tyson Bigler bigler at shellus.com
Mon Jul 19 13:38:58 GMT 1999


> Date:   Thu, 15 Jul 1999 14:37:03 -0700
> From:   "Stephen L Arnold" <arnold.steve at ensco.com>
> To:     samba at samba.org
> Subject: Re: hosts allow/deny not working correctly
> Message-ID: <199907152224.SAA22914 at rodney.cnchost.com>
> MIME-Version: 1.0
> Content-type: text/plain; charset=US-ASCII
> Content-transfer-encoding: 7BIT
> 
> When the world was young, "M. Tyson Bigler" <bigler at shellus.com>
> carved some runes like this:
> 
> > I am having difficult getting the hosts allow/deny to work with IP ranges
> > or netmasks.  Ideally I would prefer to use the IP/Netmask method, e.g.
> > 111.22.33.0/255.255.255.0, because we have a flat ATM network with
> > multiple class C's (netmask is really 255.255.252.0).  This, however,
> > doesn't work!! I can't do 111.22.33. either...  I can't even do specific
> > IP's, e.g. 111.22.33.44 but I CAN do hostnames (e.g. myhost).
> [snip]
> 
> Does solaris use the same /etc/hosts.allow and hosts.deny setup as
> linux?  If it's like file/dir permissions, etc, then the samba
> settings will *not* override the underlying system settings.
> 
> Just a thought, Steve
> 
> ******************************************************************
> Stephen L Arnold                      http://www.rain.org/~sarnold
> #include <std_disclaimer.h>
> ******************************************************************

Yes, Solaris has the same type of hosts.[allow|deny], but there's nothing in
there for the smbd/nmbd (I am, however, restricting rsh, rlogin, telnet, and
ftp).  Plus, best I remember, when I had Samba on a test server I had the
same problem and it didn't have the allow|deny files...

Thanks!

Tyson
-- 
M. Tyson Bigler                  SEPTCo Computing Solutions Group
Infrastructure Support           Bellaire Technology Center
bigler at shellus.com               3737 Bellaire Blvd., Room 1007B
    713-245-7476                 Houston, TX 77025


More information about the samba mailing list