[Samba] Firewall piercing - The Specified network name is no
robert at schetterer.org
Thu Feb 10 21:20:30 GMT 2005
-----BEGIN PGP SIGNED MESSAGE-----
following this a longer time now,
i want to say open smb to web is a total security desaster.
You will be hacked i minutes by broadcasting smb scanners.
As others recommend before , use a tunnelstuff i.e openvpn,pptpd,ipsec
to tunnel smb in this, or simple use a apache with webdav
which is shown as a network share too in windows,with same features as
Winscp is a very good solution too.
Last word about your users, if they want to connect
via the internet via smb , their clients must open smb too,
so they will be vulnerable too, they dont will feel very cool
finding their Bank accounts numbers after a few days, or their private files
somewhere in the internet stolen from some kids.
As all this stuff is freeware and mostly included in windows and in the
most nix distros , there should be no problem to setup a secure
smb or equal quality connect through the web.
Note: smb is not the solution you need , Apache with webdav will do it
Paul Gienger schrieb:
|> Dude -- Your arrogant attitude towards getting help and resolving your
|> problem is not getting you anywhere -- its obviously problematic to
|> pump SMB/CIFS into the internet the way you would like to. Why don't
|> you look at a simpler solution like running an anonymous ftp server
|> and then your pathetic windoze users can just type:
| The problem here is that *he* is the user that wants to use smb
| bare-assed over the internet. I doubt this would be that much of an
| issue if it were a user, since a respected sysadmin can usually tell
| someone how they should be using a network resource, unless the user is
| braindead upper management unfortunately. We're into the "I'd really
| like to do it this way for no apparent gain" zone on this one.
| Lets all just let this one die. No poster has touched the issue he's
| having, and from the people that have posted it doesn't look like anyone
| is going to be attempting to help, not because no one knows, but because
| it's been deemed a WTF issue. If Mr. Blank gets this one to work he'll
| have one more "I did a cool thing one day" feather in his cap when he
| goes client scouting.
|>> Please read my points on this sort of "solution" in the past. The whole
|>> REASON I want to use Plain Vanilla SMB is so I can walk up to ANY
|>> machine on the entire flippin' Internet and go:
Mit freundlichen Gruessen
Munich / Bavaria / Germany
\* public key:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the samba