I was wondering if there was a way to stop users on eth1 from using samba. The reason being is eth1 is connected to a cable modem and a few people have tried gaining access to my file server. I was thinking of maybe a command in the smb.conf that would do it or maybe a rule in my rc.firewall file. It ould be most useful.

Cheers

____________________
Have Fun

The hosts allow line in smb.conf will allow you to specify what IP addresses can mae connections to you samba server, setting this to just your internal LAN will effecting stort this one out.

What are you using for your firewall? IPChains/IPTables? Have a serch for posts on the forum by Razbot - Raz is pretty hot on the ole network security front - his posts make better reading than my efforts security efforts would. I'd seriously think about reviewing your firewall though as you can have lots of things open that you may not even realise!

cheers

Jamie...

Yeah ive got that in my smb.conf already.
the only thing wrong is that the hacker still has a chance of getting in using some sort of ip spoofing tool. which wiil allow him to pretend to have a internal network ip.

I use Ipchains with 2.2.18 redhat 7


cheers

_____________________________
Have Fun