[samba] Не работают smbtree и LinNeighbornhood

Alexander Bokovoy ab на altlinux.org
Пт Июл 23 15:56:38 MSD 2004


On Fri, Jul 23, 2004 at 02:09:51PM +0300, Slava Dubrovskiy wrote:
>        interfaces = eth0, lo
>        bind interfaces only = Yes
Это обязательно? На машине еще есть интерфейсы?

For  name service it causes nmbd to bind to ports 137 and 138 on the
interfaces listed in the  interfaces  parameter.  nmbd also binds  to  the
"all addresses" interface (0.0.0.0) on ports 137 and 138 for the purposes
of reading broadcast messages. If this option is not set then nmbd will
service name requests on all of these sockets.  If bind interfaces only is
                                                ^^^^^^^^^^^^^^^^^^^^^^^^^^
set then nmbd will check the source address of any packets coming in on
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
the broadcast sockets and discard any that don't match the broadcast
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
addresses of the interfaces in the interfaces parameter list.  As unicast
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
packets are received on the other sockets it allows nmbd to refuse to
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
serve names to machines that send packets that arrive through any
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
interfaces not listed in the interfaces list.  IP Source address spoofing
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
does defeat this simple check, however, so it must not be used seriously
as a security feature for nmbd.

-- 
/ Alexander Bokovoy
Samba Team                      http://www.samba.org/
ALT Linux Team                  http://www.altlinux.org/
Midgard Project Ry              http://www.midgard-project.org/


Подробная информация о списке рассылки Samba