[Xastir] Samba Peculiarity
Tom ve7did
ve7did at dccnet.com
Wed Feb 11 00:34:10 EST 2009
Thanks guys, much appreciated. I'll fix it up in the near future. I
guess I must have had it set up properly on the previous version as I
don't remember the broadcasts to ax25 before... Amazing what we (I)
forget as time whistles by.
--
Propagation Knows No Boundaries
73 de Tom, ve7did
Tom Russo wrote:
> On Tue, Feb 10, 2009 at 09:46:12PM -0700, we recorded a bogon-computron collision of the <russo at bogodyn.org> flavor, containing:
>
>> This is a well-known issue with kernel AX.25 networking and samba. Yes, by
>> default Samba binds to all network interfaces and sends out "I'm here" packets
>> to them.
>>
>> There is indeed a way to shut it off.
>>
>> In your smb.conf file you need to have an "interfaces" line that lists the
>> network interfaces you want samba to use. Then you have a
>> "bind interfaces only" line that tells samba to use *only* the interfaces
>> listed in that line.
>>
>> If you use "swat" to manage your samba configuration, there's certainly a way
>> to do it there, too.
>>
>> On the "Globals" page of the SWAT configuration tool, look under "Base Options"
>> and add your valid network interfaces to the "interfaces" box. Then set
>> "bind interfaces only" to "Yes" and commit changes, and restart your daemons.
>> It should no longer touch your ax.25 interfaces.
>>
>
> And if, as you say, you're not even *using* samba, you're better off shutting
> off the daemon anyway. But if you *do* want to use it, you should probably
> read the smb.conf man page and learn how to make it listen not only to
> certain interfaces, but to certain valid IP addresses. You don't want your
> samba to be sending out past your router, nor listening to anybody that's
> not on your LAN.
>
> Samba's a pain to secure, but once you get it right it is good for what it
> does (sharing disks and printers to Windows clients --- you don't even need
> to run the daemons to share disks and printers from Windows servers).
>
>
More information about the Xastir
mailing list