[Samba] deny new connections

[Steven Broos]

I was looking for a solution in Samba, but just tried something with iptables.
Does this seem like a valid solution ?

iptables -A INPUT -m state --state new -j DROP



-----Original Message-----
From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Steven Broos
Sent: donderdag 6 maart 2014 14:07
To: 'samba at lists.samba.org'
Subject: [Samba] deny new connections

Hi people,

I was wondering: is it possible to deny all new connections to samba, but keep the current connections working ?

We have some applications running from a samba share. To update the application everybody needs to close it.
Since we have almost 1000 concurrent users, 24/7, it is difficult to keep them out.
My solution now is:

-          Communicating the downtime and provide a time window in which users cannot access the application

-          In that time window: checking smbstatus for who is still logged in, phone them, and ask to quit the app

-          Change smb.conf to only allow my IP address, restart smb

-          Update

-          Restore original config and restart

Big culprit in this method is that sometimes users start the application while I stop or restart samba.
This often causes data-file corruption; the apps are very sensitive to that .

It would be very handy to deny new connections, but keep current connections (new file locks included) working.

Vriendelijke groeten,
Steven Broos | systeembeheerder
Lokale Politie Antwerpen | ICT
Digipolis I, Generaal Armstrongweg 1 | 2020 Antwerpen tel. 03 338 99 60 | fax 03 338 99 61 steven.broos at politie.antwerpen.be www.politieantwerpen.be

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba