[Samba] Blocking internet access to Samba

Andrew Bartlett abartlet at samba.org
Wed Oct 30 21:05:02 GMT 2002

Kaleb Pederson wrote:
> On Wednesday 30 October 2002 12:53 pm, Andrew Bartlett wrote:
> > Kaleb Pederson wrote:
> <snip>
> >
> > And tcp 445, the new port that Win2k (and hence Samba 3.0) now uses.
> > (Netbiosless SMB/CIFS)
> >
> > Andrew Bartlett
> Doesn't it drop back to 139 (or one of the other ports) if it can't make a
> connection on (what I believe is the encrypted) port?

There is very little that is 'encrypted' in SMB.  It uses a
challange-response authentication scheme - but it has so many holes in
it that you would be very unwise to put it anywhere you don't trust...

Samba does not support any SMB signing or SMB sealing at present.

Andrew Bartlett

Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net

More information about the samba mailing list