[Samba] listenning on interfaces

Jean LEE jean_lee_3 at hotmail.com
Tue Jun 15 08:11:39 GMT 2004


Hello,

I am new to samba and i would to well secure it.

In smb.conf, I entered the following lines :

hosts allow = 192.168.0.2 127.0.0.1
hosts deny = 0.0.0.0/0
bind interfaces only = yes
interfaces = eth0 lo

I thought that it would only listens on the local machine and my internal Lan (which is on eth0 192.168.0.1) but nmbd seems to always listen on UDP/137 and UDP/138 (netbios-ns and netbios-dgm) on 0.0.0.0/0. Here is the output of netstat :

[root at ServeurLinux user]# netstat -taup
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address                     Foreign Address     State     PID/Program name
tcp     0             0         192.168.0.1:netbios-ssn         *:*                     LISTEN     3800/smbd
tcp     0             0         ServeurLinu:netbios-ssn         *:*                     LISTEN     3800/smbd
tcp     0             0        ServeurLinux:ipp                    *:*                     LISTEN     3707/cupsd
tcp     0             0         192.168.0.:microsoft-ds         *:*                     LISTEN     3800/smbd
tcp     0             0         ServeurLin:microsoft-ds         *:*                     LISTEN     3800/smbd
udp     0             0        192.168.0.1:netbios-ns         *:*                                         3804/nmbd
udp     0             0        *:netbios-ns                         *:*                                         3804/nmbd
udp     0             0         192.168.0.1:netbios-dgm     *:*                                         3804/nmbd
udp     0             0         *:netbios-dgm                         *:*                                        3804/nmbd


What is netbios-ns and netbios-dgm? I would prefer that nmbd doesn't listen on *:netbios-ns and *:netbios-dgm because I will connect my server to the internet through eth1 10.0.0.1. How can I do it?

Thanks for any help.

Jean Lee.


More information about the samba mailing list