LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 09-09-2009, 01:20 PM   #1
rjo98
Senior Member
 
Registered: Jun 2009
Location: US
Distribution: RHEL, CentOS
Posts: 1,674

Rep: Reputation: 47
Who keeps putting same file onto Samba share


OK, i have a samba share where everyone connects anonymously since they aren't prompted for a username/password from their PCs. Somehow the same file keeps reappearing over and over in a folder where all new files get sucked out of. How do i tell who's putting that file in the folder every 2 minutes. can i tell an IP or anything?
 
Old 09-09-2009, 05:47 PM   #2
tredegar
LQ 5k Club
 
Registered: May 2003
Location: London, UK
Distribution: Debian "Jessie"
Posts: 6,085

Rep: Reputation: 398Reputation: 398Reputation: 398Reputation: 398
Quote:
i have a samba share where everyone connects anonymously since they aren't prompted for a username/password from their PCs.... [SNIP]
It looks like you are running a completely "open" system.
Are you really that surprised that mysterious files are being up / down loaded?
Do you have any idea of what the implications of this might be?

Time to read up on security, access rights, mail relays, and all I think.

If your computer is connected to the Internet, you need to learn how to lock it up and prevent others from taking advantage from you.

Please get busy before your ISP disconnects you for relaying spam, or worse.
 
Old 09-09-2009, 05:50 PM   #3
rjo98
Senior Member
 
Registered: Jun 2009
Location: US
Distribution: RHEL, CentOS
Posts: 1,674

Original Poster
Rep: Reputation: 47
Well, its an internal system, and it wasn't really a mysterious file, it was an internal file. it ended up being stuck in a file moving process on another server, it couldn't delete the original file so it kept moving it to this server. I guess I was more just curious as to if there was a way to tell from the server getting the file where it actually came from.

And yes I agree having it open like that is a bad idea, but that's how I inherited it.
 
Old 09-09-2009, 06:58 PM   #4
onebuck
Moderator
 
Registered: Jan 2005
Location: Midwest USA, Central Illinois
Distribution: SlackwareŽ
Posts: 12,601
Blog Entries: 25

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
Hi,

Then you should setup some security for the system. It would be embarrassing and possible fatal for you and your company or boss. Not that difficult to harden a system. Do a search here on LQ as this very subject has been covered many times.

Take a look at the 'Security Section' of 'Slackware-Links'. More than just SlackwareŽ links!
 
Old 09-10-2009, 08:40 AM   #5
rjo98
Senior Member
 
Registered: Jun 2009
Location: US
Distribution: RHEL, CentOS
Posts: 1,674

Original Poster
Rep: Reputation: 47
Thanks. I definitely do plan on hardening the system. But in the meantime, is there actually an answer to the question I asked? My guess is no based on the lack of response to my actual question. I do appreciate the posts about how wrong this setup is, hopefully it helps someone who doesn't know better about securing a server.
 
Old 09-10-2009, 07:37 PM   #6
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,254

Rep: Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328
The short answer is no, files do not contain any info about where they came from... especially if all users are anonymous.
I don't know if the samba server can be induced to log all accesses, specifically which files created when/where... maybe ...
 
Old 09-10-2009, 08:18 PM   #7
rjo98
Senior Member
 
Registered: Jun 2009
Location: US
Distribution: RHEL, CentOS
Posts: 1,674

Original Poster
Rep: Reputation: 47
that was kinda what i was thinking, but thanks for confirming.
 
Old 09-10-2009, 09:10 PM   #8
michaelk
Moderator
 
Registered: Aug 2002
Posts: 15,245

Rep: Reputation: 1624Reputation: 1624Reputation: 1624Reputation: 1624Reputation: 1624Reputation: 1624Reputation: 1624Reputation: 1624Reputation: 1624Reputation: 1624Reputation: 1624
I have not played with samba log levels but the higher you go the more verbose they become (and much much bigger in size). You might be able to match an IP address to the share where the file is being written. You can create log files for each IP address too.

http://oreilly.com/catalog/samba/cha...k/ch04_08.html
 
Old 09-11-2009, 08:33 AM   #9
rjo98
Senior Member
 
Registered: Jun 2009
Location: US
Distribution: RHEL, CentOS
Posts: 1,674

Original Poster
Rep: Reputation: 47
ok, i'll check out the link, thanks.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Keep file rights with samba share eRJe Linux - Server 1 08-14-2008 07:54 AM
Samba OS X to Linux Samba file share error ttoomey Linux - Software 1 08-16-2005 11:12 AM
possible to see a Linux SAMBA File share... Russ3482 Linux - Software 1 08-11-2004 03:17 PM
samba as a file server/share mnadeemrao Linux - Software 0 10-30-2003 06:21 AM
Changing file permissions on a SAMBA file share apenney Linux - Software 0 02-11-2002 05:42 PM


All times are GMT -5. The time now is 09:18 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration