[Samba] UDP/138 answers sending from false IP on multinetwork-server

[Andreas Matthus]

Hallo,

after change net-infrastructure on a multinetwork-server can on segment
not find the logon-server. Source problem is, that nmbd sending UDP/138
answers from a false IP.

12:08:08.909997 IP 123.4.5.6.138 > 123.4.7.7.138: NBT UDP PACKET(138)
12:08:08.910083 IP 10.9.0.1.138 > 123.4.5.5.138: NBT UDP PACKET(138)

UDP/137 and all TCP-traffic are O.K. My server has two active netcards
for samba (and localhost):

123.4.7.7, 10.9.0.1

In smb.conf is written:

        interfaces = 127.0.0.1, 123.4.7.7, 10.9.0.1
        bind interfaces only = yes
        hosts allow = 127.0.0.1, 10.9.0.0/255.255.255.0, \
123.4.5.0/255.255.255.128, 10.8.0.0/255.255.255.0, 123.4.7.7

On network 10.8.0.0 all O.K. with trafic over a router-firewall to
10.9.0.1 (with lmhost on the clients). On network 123.4.5.0 I have the
trouble. The lmhost is:

123.4.7.7  serv1        #PRE    #DOM:ABC
123.4.7.7  "ABC            \0x1b"  #PRE

In hosts:
123.4.7.7	serv1

Between the networks is a cisco-firewall that blocks the
not-network-specific traffic 10.9.0.1 on the vlan for 123.4.5.0. In this
case the pakages UDP/138 can't reach for the client.

Hint: In another network in other buildings I have a simliary
installation. In that nmbd sends to 127.0.0.1 and in tcpdump is seen the
rigth sender-IP for each adapter.

What can I do?

with regards
Andreas Matthus



-- 
Andreas Matthus <matthus at nexgo.de>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4847 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba/attachments/20150110/9aa369b5/attachment.bin>