[Samba] [3.6.6] nmbd reachable on 0.0.0.0: Safe?

[Winfried]

Hello

I'm running Samba 3.6.6 on a Linux host on a LAN connected to the Net, with
my ADSL modem acting as firewall/router so as to keep local services like
Samba unaccessible from the Net.

Still, I wanted to check if it's safe to have nmbd reachable from 0.0.0.0 on
UDP137/138:

~# netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
PID/Program name
tcp        0      0 127.0.0.1:445           0.0.0.0:*               LISTEN     
1917/smbd
tcp        0      0 192.168.0.15:445        0.0.0.0:*               LISTEN     
1917/smbd
tcp        0      0 127.0.0.1:139           0.0.0.0:*               LISTEN     
1917/smbd
tcp        0      0 192.168.0.15:139        0.0.0.0:*               LISTEN     
1917/smbd
tcp6       0      0 ::1:445                 :::*                    LISTEN     
1917/smbd
tcp6       0      0 fe80::50:43ff:fee7::445 :::*                    LISTEN     
1917/smbd
tcp6       0      0 ::1:139                 :::*                    LISTEN     
1917/smbd
tcp6       0      0 fe80::50:43ff:fee7::139 :::*                    LISTEN     
1917/smbd
udp        0      0 192.168.0.255:137       0.0.0.0:*                          
1913/nmbd
udp        0      0 192.168.0.15:137        0.0.0.0:*                          
1913/nmbd
udp        0      0 0.0.0.0:137             0.0.0.0:*                          
1913/nmbd
udp        0      0 192.168.0.255:138       0.0.0.0:*                          
1913/nmbd
udp        0      0 192.168.0.15:138        0.0.0.0:*                          
1913/nmbd
udp        0      0 0.0.0.0:138             0.0.0.0:*                          
1913/nmbd

Also, do I really need to use IPv6 on my LAN?

Thank you.



--
View this message in context: http://samba.2283325.n4.nabble.com/3-6-6-nmbd-reachable-on-0-0-0-0-Safe-tp4721155.html
Sent from the Samba - General mailing list archive at Nabble.com.