Re: [Samba] Using the right network interface

2003-01-02 Thread John H Terpstra
On Thu, 2 Jan 2003, Ronan Waide wrote:

 On December 10, [EMAIL PROTECTED] said:
 
  Try adding to smb.conf [globals]:
 
  interfaces = eth0 loOB

Check that this says:

interfaces = eth0 lo

where lo is whatever the loopback interface is called on your system. To
find it's name run 'ifconfig -a'

The OB is a glitch.

  bind interfaces only = Yes

 Digging up this thread again:

 the current redhat version of samba seems to disregard the setting of
 'bind interfaces only', as I'm still getting occasional external scans
 poking at my nmbd and getting a response. I had thought it was working
 correctly until I spotted a scan going through.

What is the output of 'netstat -a'?

HAve you set up a firewall on your system? How have you firewalled port
137/udp?

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2003-01-02 Thread Ronan Waide
On January 2, [EMAIL PROTECTED] said:
 Check that this says:
 
   interfaces = eth0 lo
 
 where lo is whatever the loopback interface is called on your system. To
 find it's name run 'ifconfig -a'

I'd realised that. I'm not exactly a newcomer to unix/samba :)
 
 What is the output of 'netstat -a'?

netstat was originally (I thought) showing nothing listening on
0.0.0.0. Reading the man page I realise this can't be right, since
nmbd needs to listen there for broadcast traffic. It's currently
showing a listener on 0.0.0.0. Tweaking socket address, interfaces,
and bind interfaces only doesn't appear to change this, but as I said
that's what I'd expect having read through the manual page. I'm just
suffering from some sort of delusion that I managed to switch the
service off at some point.
 
 HAve you set up a firewall on your system? How have you firewalled port
 137/udp?

No, the whole point of my setup is to try and configure any services
on the machine to be safe in the absence of a firewall. If I don't
have a listener on a given interface, then it doesn't matter if the
firewall is working or not, you can't get any information from that
interface for whatever service you're looking for.

Cheers,
Waider.
-- 
[EMAIL PROTECTED] / Yes, it /is/ very personal of me.

merde says, in other news, our mini-blimp blew away.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2003-01-02 Thread John H Terpstra
On Thu, 2 Jan 2003, Ronan Waide wrote:

 On January 2, [EMAIL PROTECTED] said:
  Check that this says:
 
  interfaces = eth0 lo
 
  where lo is whatever the loopback interface is called on your system. To
  find it's name run 'ifconfig -a'

 I'd realised that. I'm not exactly a newcomer to unix/samba :)

  What is the output of 'netstat -a'?

 netstat was originally (I thought) showing nothing listening on
 0.0.0.0. Reading the man page I realise this can't be right, since
 nmbd needs to listen there for broadcast traffic. It's currently
 showing a listener on 0.0.0.0. Tweaking socket address, interfaces,
 and bind interfaces only doesn't appear to change this, but as I said
 that's what I'd expect having read through the manual page. I'm just
 suffering from some sort of delusion that I managed to switch the
 service off at some point.

Check the code for nmbd. You will see that it is essential that nmbd
listens on all interfaces. That means it can reply to requests also. It
will NOT broadcast on interfaces that are excluded from the interfaces
specification if bind interfaces only has been set.


  HAve you set up a firewall on your system? How have you firewalled port
  137/udp?

 No, the whole point of my setup is to try and configure any services
 on the machine to be safe in the absence of a firewall. If I don't
 have a listener on a given interface, then it doesn't matter if the
 firewall is working or not, you can't get any information from that
 interface for whatever service you're looking for.

You are way out of good fortune if that is your intent. The only way you
can completely isolate your samba server is using a firewall. I am happy
to send you my simple iptables script if that will help you.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2003-01-02 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 2 Jan 2003, Ronan Waide wrote:

 Well, yeah, my understanding of the manual page was that if I set bind
 interfaces only, then it'll only respond on those interfaces. So even if
 someone pokes at the dialup interface, they shouldn't get a response.
 This doesn't appear to be the case at the moment.

No. I think the manual page describes a subtle difference (at least it 
used to).  if bind interfaces only is enabled, then nmbd will only 
respond to packets whose broadcast address matches the address of an
interface listed as a  valid interfaces in smb.conf.



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2 SAMS Teach Yourself Samba in 24 Hours 2ed
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+FKqiIR7qMdg1EfYRAqfSAJ9wJA2tIKPtpFkQof+AVAc603PgEgCeM+aQ
r6wC+sd5VHjzeAArJpa5RHg=
=pxXu
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2003-01-02 Thread John H Terpstra
On Thu, 2 Jan 2003, Ronan Waide wrote:

 On January 2, [EMAIL PROTECTED] said:
 
  Check the code for nmbd. You will see that it is essential that nmbd
  listens on all interfaces. That means it can reply to requests also. It
  will NOT broadcast on interfaces that are excluded from the interfaces
  specification if bind interfaces only has been set.

 Well, yeah, my understanding of the manual page was that if I set bind
 interfaces only, then it'll only respond on those interfaces. So even
 if someone pokes at the dialup interface, they shouldn't get a
 response. This doesn't appear to be the case at the moment.

  can completely isolate your samba server is using a firewall. I am happy
  to send you my simple iptables script if that will help you.

 Well, no, as I said, I'm not a newcomer to this stuff. I'm just not
 inclined to rely 100% on a firewall to do my security; I want the
 services it's protecting to be secure also.

Ok. I understand what you want, but samba does not meet your needs right
now. What is the next step then? How do you propose to solve the problem?

Send us your samba patches and we will consider them.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-16 Thread Eric Boehm
On Mon, Dec 16, 2002 at 10:46:23AM +1100, Simeonidis, Steve wrote:
 Steve == Simeonidis, Steve [EMAIL PROTECTED] writes:

Steve Sorry Eric, I'm talking about Windows DOMAIN/WORKGROUPS One
Steve interface will have a different Domain to the other

Steve eg.  eth0 Domain - DomainA eth1 Domain - DomainB


Steve I was just wondering if nmbd will work properly.

I believe that it should as long as you are running a separate
smbd/nmbd on each interface.

Eric What kind of domain do you mean? A Windows domain or a DNS
Eric domain? If its a DNS domain, I don't think it matters. If
Eric it is a Windows domain, I am not sure.

Eric I'm not sure I understand the question. In the link for the
Eric thread I sent you

Eric http://marc.theaimsgroup.com/?t=10130473722r=1w=2

-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Using the right network interface

2002-12-15 Thread Simeonidis, Steve
Title: RE: [Samba] Using the right network interface





Sorry Eric, I'm talking about Windows DOMAIN/WORKGROUPS.


One interface will have a different Domain to the other.


eg.
eth0 Domain - DomainA
eth1 Domain - DomainB



I was just wondering if nmbd will work properly.



Thanks



Steve Simeonidis
Network Engineer, Spherion Education
Spherion Group Ltd


Making the Workplace Work Better


1st Floor, 493 St. Kilda Rd,
Melbourne VIC 3004, 
Australia
+61 3 9243 2382
[EMAIL PROTECTED]




-Original Message-
From: Eric Boehm [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 12, 2002 11:58 PM
To: Simeonidis, Steve
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Using the right network interface



On Thu, Dec 12, 2002 at 11:16:39PM +1100, Simeonidis, Steve wrote:
 Steve == Simeonidis, Steve [EMAIL PROTECTED] writes:


 Steve Thanks for that, I'll give it a go! Will nmbd work
 Steve properly if one interface belongs to a different domain
 Steve than the other?



What kind of domain do you mean? A Windows domain or a DNS domain? If
its a DNS domain, I don't think it matters. If it is a Windows domain,
I am not sure.


I'm not sure I understand the question. In the link for the thread I
sent you


http://marc.theaimsgroup.com/?t=10130473722=1=2


The examples I provide run a separate smbd *and* nmbd for each
interface. 


BTW, I built 2.2.5 and it only binds to one interface for me if I just
specify 


interfaces = 192.168.1.1/24


even if bind interfaces only = yes is commented out.


 Steve Will it get mixed up?



-- 
Eric M. Boehm /\ ASCII Ribbon Campaign
[EMAIL PROTECTED] \ / No HTML or RTF in mail
 X No proprietary word-processing

Respect Open Standards / \ files in mail


The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any interference with, 
use, disclosure or copying of this material is unauthorised and prohibited; and

(b) may contain personal information of the recipient and/or the sender as defined 
under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
collect, hold and use such information and any personal information contained in a 
response to this email, for any reasonable

purpose in the ordinary course of Spherion’s business, including forwarding this email 
internally or disclosing it to a third party. All personal information collected by Spherion 
will be handled in accordance with Spherion’s Privacy Policy. If you have received 
this email in error, please notify the sender and delete it.






RE: [Samba] Using the right network interface

2002-12-12 Thread Simeonidis, Steve
Title: RE: [Samba] Using the right network interface





Thanks for that, I'll give it a go!


Will nmbd work properly if one interface belongs
to a different domain than the other?


Will it get mixed up?


Thanks


-Original Message-
From: Eric Boehm
To: Simeonidis, Steve
Cc: [EMAIL PROTECTED]
Sent: 12/12/02 12:30 AM
Subject: Re: [Samba] Using the right network interface


On Wed, Dec 11, 2002 at 08:19:12AM -0500, Boehm, Eric [NCRTP:C28D:EXCH]
wrote:
  Eric == Boehm, Eric [NCRTP:C28D:EXCH] Boehm writes:
 Steve == Simeonidis, Steve [EMAIL PROTECTED]


 Steve What I'm really trying to do and why I need this is because
 Steve I want to run 2 instances of SAMBA, a different one on each
 Steve interface.


 Eric That's a different problem. I think I posted a message on
 Eric this before. I'll try to find it and send you the
 Eric reference.


Here's the reference for the question I responded to on 2/7/2002. My
suggestions worked for the person asking the question.


http://marc.theaimsgroup.com/?t=10130473722=1=2


-- 
Eric M. Boehm /\ ASCII Ribbon Campaign
[EMAIL PROTECTED] \ / No HTML or RTF in mail
 X No proprietary word-processing

Respect Open Standards / \ files in mail


The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any interference with, 
use, disclosure or copying of this material is unauthorised and prohibited; and

(b) may contain personal information of the recipient and/or the sender as defined 
under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
collect, hold and use such information and any personal information contained in a 
response to this email, for any reasonable

purpose in the ordinary course of Spherion’s business, including forwarding this email 
internally or disclosing it to a third party. All personal information collected by Spherion 
will be handled in accordance with Spherion’s Privacy Policy. If you have received 
this email in error, please notify the sender and delete it.






Re: [Samba] Using the right network interface

2002-12-12 Thread Eric Boehm
On Thu, Dec 12, 2002 at 11:16:39PM +1100, Simeonidis, Steve wrote:
 Steve == Simeonidis, Steve [EMAIL PROTECTED] writes:

Steve  Thanks for that, I'll give it a go!  Will nmbd work
Steve properly if one interface belongs to a different domain
Steve than the other?


What kind of domain do you mean? A Windows domain or a DNS domain? If
its a DNS domain, I don't think it matters. If it is a Windows domain,
I am not sure.

I'm not sure I understand the question. In the link for the thread I
sent you

http://marc.theaimsgroup.com/?t=10130473722r=1w=2

The examples I provide run a separate smbd *and* nmbd for each
interface. 

BTW, I built 2.2.5 and it only binds to one interface for me if I just
specify 

interfaces = 192.168.1.1/24

even if bind interfaces only = yes is commented out.

Steve Will it get mixed up?


-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-11 Thread Eric Boehm
On Wed, Dec 11, 2002 at 12:52:31PM +1100, Simeonidis, Steve wrote:
 Steve == Simeonidis, Steve [EMAIL PROTECTED] writes:

Steve I've tried the bind interfaces only = yes but still the
Steve same netstat gives the same results.

Hmmm. That's odd. Maybe we need to see the rest of your smb.conf.

I have samba running on my firewall (Red Hat 7.2) at home and it is
restricted to the internal interface.

netstat -an | grep 137 returns


udp0  0 192.168.1.1:137 0.0.0.0:*   
udp0  0 0.0.0.0:137 0.0.0.0:*   
unix  2  [ ] DGRAM1372   

Here are all my interfaces

ifconfig -a
eth0  Link encap:Ethernet  HWaddr 00:80:C6:F7:8E:0C  
  inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
  EtherTalk Phase 2 addr:65280/100
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:92588 errors:0 dropped:0 overruns:0 frame:0
  TX packets:90112 errors:1 dropped:0 overruns:0 carrier:1
  collisions:0 
  RX bytes:59279583 (56.5 Mb)  TX bytes:35587352 (33.9 Mb)

eth1  Link encap:Ethernet  HWaddr 00:01:02:2E:D3:C0  
  inet addr:X.X.X.X  Bcast:255.255.255.255  Mask:255.255.252.0
  EtherTalk Phase 2 addr:65280/200
  UP BROADCAST NOTRAILERS RUNNING  MTU:1500  Metric:1
  RX packets:2180771 errors:0 dropped:0 overruns:0 frame:0
  TX packets:84308 errors:0 dropped:0 overruns:0 carrier:1
  collisions:833 
  RX bytes:161348660 (153.8 Mb)  TX bytes:58081125 (55.3 Mb)

gre0  Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
  NOARP  MTU:1476  Metric:1
  RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 
  RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

loLink encap:Local Loopback  
  inet addr:127.0.0.1  Mask:255.0.0.0
  EtherTalk Phase 2 addr:0/0
  UP LOOPBACK RUNNING  MTU:16436  Metric:1
  RX packets:605 errors:0 dropped:0 overruns:0 frame:0
  TX packets:605 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 
  RX bytes:99629 (97.2 Kb)  TX bytes:99629 (97.2 Kb)

And here's my smb.conf (I've deleted the shares for brevity)

# Global parameters
[global]
security = server
encrypt passwords = yes
workgroup = BOEHM
netbios name = ARACHNE
server string = Samba Server
interfaces = 192.168.1.1/24
#bind interfaces only = Yes
log file = /var/log/samba/log.%m
#max log size = 50
max open files = 1014
#debug level = 3
socket options = TCP_NODELAY
dns proxy = No
wins support = true
hosts allow = 192.168.1.
os level = 65
domain master = yes

Well, I thought I had bind interfaces only = Yes but it is commented
out. I commented out the interfaces lines and restarted Samba. Now

netstat -an | grep 137
udp0  0 192.168.1.1:137 0.0.0.0:*   
udp0  0 X.X.X.X:137  0.0.0.0:*   
udp0  0 0.0.0.0:137 0.0.0.0:*   

shows 2 interfaces.

This is version 2.2.1a. I also shut down the firewall software
(netfilter) temporarily to see if it was causing Samba to be
restricted to one interface, but that wasn't the case.

I'll try building 2.2.5 later and see if it makes a difference.

Steve What I'm really trying to do and why I need this is because
Steve I want to run 2 instances of SAMBA, a different one on each
Steve interface.

That's a different problem. I think I posted a message on this
before. I'll try to find it and send you the reference.



-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-11 Thread Eric Boehm
On Wed, Dec 11, 2002 at 08:19:12AM -0500, Boehm, Eric [NCRTP:C28D:EXCH] wrote:
  Eric == Boehm, Eric [NCRTP:C28D:EXCH] Boehm writes:
 Steve == Simeonidis, Steve [EMAIL PROTECTED]

Steve What I'm really trying to do and why I need this is because
Steve I want to run 2 instances of SAMBA, a different one on each
Steve interface.

 Eric That's a different problem. I think I posted a message on
 Eric this before. I'll try to find it and send you the
 Eric reference.

Here's the reference for the question I responded to on 2/7/2002. My
suggestions worked for the person asking the question.

http://marc.theaimsgroup.com/?t=10130473722r=1w=2

-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-11 Thread Ronan Waide
On December 11, [EMAIL PROTECTED] said:
 Well, I thought I had bind interfaces only = Yes but it is commented
 out. I commented out the interfaces lines and restarted Samba. Now

Red Hat 7.3
samba-2.2.7-1.7.3

with the interfaces line, there's still a listener on the ppp0
interface (the one I don't want a listener on). Adding bind interfaces
only = yes makes that listener go away.

Thanks for the pointer. I'd gone through the manual page some months
ago and apparently missed this.

Waider.
-- 
[EMAIL PROTECTED] / Yes, it /is/ very personal of me.

No, I keep thinking you're a real country rather than a potato-worshipping
 bit of mud. - Susan Witterick
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Using the right network interface

2002-12-10 Thread Simeonidis, Steve
Title: Using the right network interface





Hi everyone,


samba 2.2.5
The server I'm using has 2 interfaces so using the
interface parameter I'm telling samba to use eth0 but
for some reason when I do netstat it is listening on eth1


interface = eth0 (the IP is 192.168.6.10)



netstat -an
udp 0 0 138.79.161.225:137 0.0.0.0:*
udp 0 0 0.0.0.0:137 0.0.0.0:*
udp 0 0 138.79.161.225:138 0.0.0.0:*


138.79.161.225 is the IP of eth1!??!


I've also tried interface = 192.168.6.10/24


Any ideas??



Steve Simeonidis
Network Engineer, Spherion Education
Spherion Group Ltd


The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any interference with, 
use, disclosure or copying of this material is unauthorised and prohibited; and

(b) may contain personal information of the recipient and/or the sender as defined 
under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
collect, hold and use such information and any personal information contained in a 
response to this email, for any reasonable

purpose in the ordinary course of Spherion’s business, including forwarding this email 
internally or disclosing it to a third party. All personal information collected by Spherion 
will be handled in accordance with Spherion’s Privacy Policy. If you have received 
this email in error, please notify the sender and delete it.






Re: [Samba] Using the right network interface

2002-12-10 Thread John H Terpstra
On Tue, 10 Dec 2002, Simeonidis, Steve wrote:

 Hi everyone,

 samba 2.2.5
 The server I'm using has 2 interfaces so using the
 interface parameter I'm telling samba to use eth0 but
 for some reason when I do netstat it is listening on eth1

 interface = eth0 (the IP is 192.168.6.10)

Try adding to smb.conf [globals]:

interfaces = eth0 loOB
bind interfaces only = Yes

Then check - it should work.

- John T.



 netstat -an
 udp0  0 138.79.161.225:137  0.0.0.0:*
 udp0  0 0.0.0.0:137 0.0.0.0:*
 udp0  0 138.79.161.225:138  0.0.0.0:*

 138.79.161.225 is the IP of eth1!??!

 I've also tried interface = 192.168.6.10/24

 Any ideas??


 Steve Simeonidis
 Network Engineer, Spherion Education
 Spherion Group Ltd

 The information contained in this email and any attachments to it:

 (a) may be confidential and if you are not the intended recipient, any interference 
with,
 use, disclosure or copying of this material is unauthorised and prohibited; and

 (b) may contain personal information of the recipient and/or the sender as defined
 under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to
 collect, hold and use such information and any personal information contained in a
 response to this email, for any reasonable

 purpose in the ordinary course of Spherion’s business, including forwarding this 
email
 internally or disclosing it to a third party. All personal information collected by 
Spherion
 will be handled in accordance with Spherion’s Privacy Policy. If you have received
 this email in error, please notify the sender and delete it.



-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-10 Thread Joel Hammer
Just having a senior moment here, but, I recall vaguely that samba will
listening on all NIC's but ignores the ones you tell it to ignore with.

Joel

On Tue, Dec 10, 2002 at 07:44:02PM +1100, Simeonidis, Steve wrote:
 Hi everyone,
 
 samba 2.2.5
 The server I'm using has 2 interfaces so using the
 interface parameter I'm telling samba to use eth0 but
 for some reason when I do netstat it is listening on eth1
 
 interface = eth0 (the IP is 192.168.6.10)
 
 
 netstat -an
 udp0  0 138.79.161.225:137  0.0.0.0:*
 udp0  0 0.0.0.0:137 0.0.0.0:*
 udp0  0 138.79.161.225:138  0.0.0.0:*
 
 138.79.161.225 is the IP of eth1!??!
 
 I've also tried interface = 192.168.6.10/24
 
 Any ideas??
 
 
 Steve Simeonidis
 Network Engineer, Spherion Education
 Spherion Group Ltd
 
 The information contained in this email and any attachments to it:
 
 (a) may be confidential and if you are not the intended recipient, any interference 
with, 
 use, disclosure or copying of this material is unauthorised and prohibited; and
 
 (b) may contain personal information of the recipient and/or the sender as defined 
 under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
 collect, hold and use such information and any personal information contained in a 
 response to this email, for any reasonable
 
 purpose in the ordinary course of Spherion’s business, including forwarding this 
email 
 internally or disclosing it to a third party. All personal information collected by 
Spherion 
 will be handled in accordance with Spherion’s Privacy Policy. If you have received 
 this email in error, please notify the sender and delete it.
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-10 Thread Ronan Waide
On December 10, [EMAIL PROTECTED] said:
 Just having a senior moment here, but, I recall vaguely that samba will
 listening on all NIC's but ignores the ones you tell it to ignore with.
 
 Joel

Hmm. My home network config has samba configured to only listen on the
internal network, but nmb seems to ignore that and listen on the
external (ppp) network as well. And it definitely works, because I
occasionally have port-scanning morons successfully connecting to nmb
and getting a browse-list. Of course, they can't do anything more with
it, but.

Cheers,
Waider.
-- 
[EMAIL PROTECTED] / Yes, it /is/ very personal of me.

$HOME is where the .heart is.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-10 Thread Eric Boehm
On Tue, Dec 10, 2002 at 07:25:07AM -0500, Joel Hammer wrote:
 Joel == Joel Hammer [EMAIL PROTECTED] writes:

Joel Just having a senior moment here, but, I recall vaguely that
Joel samba will listening on all NIC's but ignores the ones you
Joel tell it to ignore with.

Yes, samba will listen on all interfaces.

The problem is that Steve hasn't specified all the parameters
necessary to restrict Samba to one interface.

Try something like the following:

interfaces   = 192.168.6.10/24 127.0.0.1/8
bind interfaces only = yes

You will want to include the loopback interfaces

Check the sections in man smb.conf regarding these two
directives. You need to include the loopback interface in the
interfaces list or smbpasswd and swat will not work.

Steve Hi everyone,

Steve samba 2.2.5 The server I'm using has 2 interfaces so using
Steve the interface parameter I'm telling samba to use eth0 but
Steve for some reason when I do netstat it is listening on eth1

Steve interface = eth0 (the IP is 192.168.6.10)


Steve netstat -an udp 0 0 138.79.161.225:137 0.0.0.0:* udp 0 0
Steve 0.0.0.0:137 0.0.0.0:* udp 0 0 138.79.161.225:138 0.0.0.0:*

Steve 138.79.161.225 is the IP of eth1!??!

Steve I've also tried interface = 192.168.6.10/24

Steve Any ideas??


-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-10 Thread Holger Krull

You will want to include the loopback interfaces

Check the sections in man smb.conf regarding these two
directives. You need to include the loopback interface in the
interfaces list or smbpasswd and swat will not work.



Hi,

are you sure about the loopback interface?
I have
  interfaces eth0:0
  bind interfaces only = yes
in smb.conf and no problems with smbpasswd and swat so far.
Other problems remain, though.

Holger



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Using the right network interface

2002-12-10 Thread Eric Boehm
On Tue, Dec 10, 2002 at 04:55:49PM +0100, Holger Krull wrote:
 Holger == Holger Krull [EMAIL PROTECTED] writes:

  You will want to include the loopback interfaces
 
 Check the sections in man smb.conf regarding these two
 directives. You need to include the loopback interface in the
 interfaces list or smbpasswd and swat will not work.
 

Holger Hi,

Holger are you sure about the loopback interface?  I have
Holger interfaces eth0:0 bind interfaces only = yes in smb.conf
Holger and no problems with smbpasswd and swat so far.  Other
Holger problems remain, though.

I am just going by the instructions. I've never tried it without the
loopback interface.

From the man page:

  If bind interfaces only is set then unless the  network
  address  127.0.0.1 is added to the interfaces parameter
  list smbpasswd(8) and swat(8)may not work  as  expected
  due to the reasons covered below.

  To change  a  users  SMB  password,  the  smbpasswd  by
  default  connects  to the localhost - 127.0.0.1 address
  as an SMB client to issue the password change  request.
  If  bind interfaces only is set then unless the network
  address 127.0.0.1 is added to the interfaces  parameter
  list  then   smbpasswd  will  fail  to  connect in it's
  default mode. smbpasswd can be forced to use  the  pri-
  mary  IP  interface  of the local host by using its  -r
  remote machine parameter, with remote  machine  set  to
  the IP name of the primary interface of the local host.

  The swat status page tries to  connect  with  smbd  and
  nmbd  at the address 127.0.0.1 to determine if they are
  running. Not adding 127.0.0.1 will cause  smbd and nmbd
  to  always  show not running even if they really are.
  Thiscanprevent swatfrom
  starting/stopping/restarting smbd and nmbd.

  Default: bind interfaces only = no





-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Using the right network interface

2002-12-10 Thread Simeonidis, Steve
Title: RE: [Samba] Using the right network interface





I've tried the bind interfaces only = yes but still the same


netstat gives the same results.



What I'm really trying to do and why I need this is because
I want to run 2 instances of SAMBA, a different one on each interface.



The second instance doesn't even start properly.


Thanks




Steve Simeonidis
Network Engineer, Spherion Education
Spherion Group Ltd


Making the Workplace Work Better


1st Floor, 493 St. Kilda Rd,
Melbourne VIC 3004, 
Australia
+61 3 9243 2382
[EMAIL PROTECTED]




-Original Message-
From: Eric Boehm [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 10, 2002 11:47 PM
To: Simeonidis, Steve
Cc: Joel Hammer; [EMAIL PROTECTED]
Subject: Re: [Samba] Using the right network interface



On Tue, Dec 10, 2002 at 07:25:07AM -0500, Joel Hammer wrote:
 Joel == Joel Hammer [EMAIL PROTECTED] writes:


 Joel Just having a senior moment here, but, I recall vaguely that
 Joel samba will listening on all NIC's but ignores the ones you
 Joel tell it to ignore with.


Yes, samba will listen on all interfaces.


The problem is that Steve hasn't specified all the parameters
necessary to restrict Samba to one interface.


Try something like the following:


interfaces = 192.168.6.10/24 127.0.0.1/8
bind interfaces only = yes


You will want to include the loopback interfaces


Check the sections in man smb.conf regarding these two
directives. You need to include the loopback interface in the
interfaces list or smbpasswd and swat will not work.


 Steve Hi everyone,


 Steve samba 2.2.5 The server I'm using has 2 interfaces so using
 Steve the interface parameter I'm telling samba to use eth0 but
 Steve for some reason when I do netstat it is listening on eth1


 Steve interface = eth0 (the IP is 192.168.6.10)



 Steve netstat -an udp 0 0 138.79.161.225:137 0.0.0.0:* udp 0 0
 Steve 0.0.0.0:137 0.0.0.0:* udp 0 0 138.79.161.225:138 0.0.0.0:*


 Steve 138.79.161.225 is the IP of eth1!??!


 Steve I've also tried interface = 192.168.6.10/24


 Steve Any ideas??



-- 
Eric M. Boehm /\ ASCII Ribbon Campaign
[EMAIL PROTECTED] \ / No HTML or RTF in mail
 X No proprietary word-processing
Respect Open Standards / \ files in mail


The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any interference with, 
use, disclosure or copying of this material is unauthorised and prohibited; and

(b) may contain personal information of the recipient and/or the sender as defined 
under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
collect, hold and use such information and any personal information contained in a 
response to this email, for any reasonable

purpose in the ordinary course of Spherion’s business, including forwarding this email 
internally or disclosing it to a third party. All personal information collected by Spherion 
will be handled in accordance with Spherion’s Privacy Policy. If you have received 
this email in error, please notify the sender and delete it.