[Xastir] Samba Peculiarity

Tom ve7did ve7did at dccnet.com
Wed Feb 11 00:34:10 EST 2009


Thanks guys, much appreciated.  I'll fix it up in the near future.  I 
guess I must have had it set up properly on the previous version as I 
don't remember the broadcasts to ax25 before...  Amazing what we (I) 
forget as time whistles by.

-- 
Propagation Knows No Boundaries
73 de Tom,  ve7did

Tom Russo wrote:
> On Tue, Feb 10, 2009 at 09:46:12PM -0700, we recorded a bogon-computron collision of the <russo at bogodyn.org> flavor, containing:
>   
>> This is a well-known issue with kernel AX.25 networking and samba.  Yes, by
>> default Samba binds to all network interfaces and sends out "I'm here" packets
>> to them.
>>
>> There is indeed a way to shut it off.
>>
>> In your smb.conf file you need to have an "interfaces" line that lists the
>> network interfaces you want samba to use.  Then you have a 
>> "bind interfaces only" line that tells samba to use *only* the interfaces 
>> listed in that line.
>>
>> If you use "swat" to manage your samba configuration, there's certainly a way
>> to do it there, too.
>>
>> On the "Globals" page of the SWAT configuration tool, look under "Base Options"
>> and add your valid network interfaces to the "interfaces" box.  Then set 
>> "bind interfaces only" to "Yes" and commit changes, and restart your daemons.  
>> It should no longer touch your ax.25 interfaces.
>>     
>
> And if, as you say, you're not even *using* samba, you're better off shutting
> off the daemon anyway.  But if you *do* want to use it, you should probably 
> read the smb.conf man page and learn how to make it listen not only to 
> certain interfaces, but to certain valid IP addresses.  You don't want your
> samba to be sending out past your router, nor listening to anybody that's 
> not on your LAN.
>
> Samba's a pain to secure, but once you get it right it is good for what it
> does (sharing disks and printers to Windows clients --- you don't even need
> to run the daemons to share disks and printers from Windows servers).
>
>   




More information about the Xastir mailing list