[Samba] openvpn and samba interfaces

[manu Baylac]

Hi list,

I use Samba 3.0.24 on Etch.
I want to connect to my Samba share trough routed vpn.
Samba server works well from the lan, and my openvpn works fine.
But something is strange ...

In my  smb.conf :
 
  hosts allow = 127.0.0.1 192.168.10.0/24 10.8.0.0/24
  hosts deny = 0.0.0.0/0
  bind interfaces only = yes
  interfaces = 127.0.0.1 192.168.10.254 10.8.0.1


where 192.168.10.254 is my lan interface and 10.8.0.1 is tun0.

With this, on my server :
me:~$ smbclient -L //10.8.0.1
Error connecting to 10.8.0.1 (Connexion refusée)
Connection to 10.8.0.1 failed

But if I use : *bind interfaces only = no*, then connexion works....

  me:~# ifconfig
[...]
eth1      Lien encap:Ethernet  HWaddr 00:E0:4C:EA:06:02 
          inet adr:192.168.10.254  Bcast:192.168.10.255  
Masque:255.255.255.0
          adr inet6: fe80::2e0:4cff:feea:602/64 Scope:Lien
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:326149 errors:0 dropped:0 overruns:0 frame:0
          TX packets:378521 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:76237419 (72.7 MiB)  TX bytes:264527493 (252.2 MiB)
          Interruption:11 Adresse de base:0xe400

lo        Lien encap:Boucle locale 
          inet adr:127.0.0.1  Masque:255.0.0.0
          adr inet6: ::1/128 Scope:Hôte
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:84624 errors:0 dropped:0 overruns:0 frame:0
          TX packets:84624 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:0
          RX bytes:33556895 (32.0 MiB)  TX bytes:33556895 (32.0 MiB)

tun0      Lien encap:UNSPEC  HWaddr 
00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 
          inet adr:10.8.0.1  P-t-P:10.8.0.2  Masque:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:76 errors:0 dropped:0 overruns:0 frame:0
          TX packets:74 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:100
          RX bytes:10715 (10.4 KiB)  TX bytes:10307 (10.0 KiB)


So, why the connexion to 10.8.0.1 is refused in "normal" configuration ?
My only solution for the moment is to push a route for 192.168.10.0/24 and
use \\192.168.10.254 on my windows client, by I'd want to use \\10.8.0.1...

Any ideas ?

Thanks in advance,

Manu