[Samba] Bind to eth1 only problem

[Tim Potter]

On Thu, 2005-11-03 at 11:59 -0800, Joseph T. Duncan wrote:
> from the man page:
> bind interfaces only (G)
> --snip--
> nmbd also binds to the "all addresses" interface (0.0.0.0) on ports 137 
> and 138 for the purposes of reading broadcast messages.
> --snip--
> 
> so i guess its not a bug but expected behavour...
> kinda dumb, would expect to be able to bind it to a specific interface 
> only. :/ as I don't care about broadcast messages on any other interfaces 
> that may be present. I can see how it would be useful in some envirnments, 
> but its not right for all environments, and should have a method for 
> stopping it from doing that with out having to resort to some other method 
> like iptables to stop the undesired behavior.

You shouldn't need to do anything with iptables.  nmbd should filter out
any broadcast messages coming from interfaces not mentioned in the
interfaces parameter.  Again, from the man page:

"If bind interfaces only is set then nmbd will check the source address
of any packets coming in on the broadcast sockets and discard any that
don’t match the broadcast addresses of the interfaces in the interfaces
parameter list."

You can probably verify this by hand using nmblookup if you are
interested.


Tim.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20051104/fbcdfeeb/attachment.bin