[Samba] Blocking internet access to Samba

[Andrew Bartlett]

Kaleb Pederson wrote:
> 
> On Wednesday 30 October 2002 12:53 pm, Andrew Bartlett wrote:
> > Kaleb Pederson wrote:
> <snip>
> >
> > And tcp 445, the new port that Win2k (and hence Samba 3.0) now uses.
> > (Netbiosless SMB/CIFS)
> >
> > Andrew Bartlett
> 
> Doesn't it drop back to 139 (or one of the other ports) if it can't make a
> connection on (what I believe is the encrypted) port?

There is very little that is 'encrypted' in SMB.  It uses a
challange-response authentication scheme - but it has so many holes in
it that you would be very unwise to put it anywhere you don't trust...

Samba does not support any SMB signing or SMB sealing at present.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net