[Samba] Samba4 and 0.0.0.0:137 and 0.0.0.0:138 opened, why ? How do close it ?

[Marc Muehlfeld]

Hello,

Am 11.01.2015 um 14:55 schrieb CpServiceSPb .:
> Here are 3 faces at Ubuntu: lo, lan and wan.
> There are lines:
> bind interfaces only = yes
> interfaces = lo lan0
> in smb.conf
> 
> But netstat -tulpn shows 0.0.0.0 binded address:
> tcp         0      0 192.168.0.254:139         0.0.0.0:*
> LISTEN      smbd
> udp        0      0 192.168.0.255:137         0.0.0.0:*
> nmbd
> udp        0      0 192.168.0.254:137         0.0.0.0:*
> nmbd
> *udp       0      0 0.0.0.0:137 <http://0.0.0.0:137>
> 0.0.0.0:*                                  nmbd*
> udp        0      0 192.168.0.255:138         0.0.0.0:*
> nmbd
> udp        0      0 192.168.0.254:138         0.0.0.0:*
> nmbd
> *udp       0      0 0.0.0.0:138 <http://0.0.0.0:138>
> 0.0.0.0:*                                  nmbd*
> 
> I don'n like *udp       0      0 0.0.0.0:port *at all !
> 
> Why is it so ?


The smb.conf man page answers this question  ('bind interfaces only'):

... nmbd also binds to the "all addresses" interface (0.0.0.0) on ports
137 and 138 for the purposes of reading broadcast messages. If this
option is not set then nmbd will service name requests on all of these
sockets. If bind interfaces only is set then nmbd will check the source
address of any packets coming in on the broadcast sockets and discard
any that don't match the broadcast addresses of the interfaces in the
interfaces parameter list. ...




Regards,
Marc