Evening list, I've been extra preoccupied for the last couple of months.
Today I took the time to look around and noticed a huge number of /var/log/samba
messages, all of the form:
[2003/12/15 21:51:00, 1] smbd/service.c:make_connection(766)
make_connections: refusing to connect with no session setup
Among the thousands of logs - each for a separate source address, some have
made over a thousand attempts to connect.
First of all, my password on the gateway wasn't good enough, I've fixed that
(I think), and the attempts have stopped. I'll admit I have been a bit slack
wrt the root password.
I don't want to insert an iptable INPUT rule for each of these addresses.
Since these attempts are log as /var/log/samba, is there a way of blocking
attempted samba connections.
I would have thought that the stateful rules would have knocked this
category out with even getting as far as a samba log.
Any help on a rule here would be much appreciated.
Nick
pgp00000.pgp
Description: PGP signature
-- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
