How to restrict samba write access from a network ?
 

Hi,

I am running FC8 and samba Version 3.0.28a-0.fc8. This box is also configured as an internet gateway.

eth0 - holds the internal network
eth2 - holds the external network

I need to configure samba in such a way that the users accessing thru eth0 needs the write access, while all other users should only have read access.

Can I get a help on this ?

Thanks

Unfortunately, doing what you want is not possible with samba.

Setting ready only or writeable in samba is on the share. So if you set a share as read only, it will be ready only no matter what interface.

You can specify a write list, for users that have write permission. Again that would be on the whole share.

I maybe wrong, but that is how I understand it, based on my reading of the Samba man pages. http://us1.samba.org/samba/docs/man/manpages-3/

I think you may need to consider running multiple instances of samba, with slightly different share definitions, and each listening to one NIC.

Not trivial - see http://us3.samba.org/samba/docs/man/...html#id2666864

Read the Multiple Virtual Server Personalities - you may be able to have different personalities listening on each NIC (see interfaces and bind interfaces parameters)

Thanks for the replies.

I ll try to host multiple servers.

By the way, has anyone done this ?