Santos Rodrigo-ARS052
2005-Mar-21 12:37 UTC
[Samba] Denied connection for correct conf inside firewall protec tion
I did some tests with test server using Samba 2.2.8a. I received some strange
messages in the log file that cannot be with below configuration:
_____________________________________________________________________________
# ../bin/testparm -x -L pscdv001 ../lib/smb.conf | more
Load smb config files from ../lib/smb.conf
Processing section "[DVfcsload]"
Processing section "[rodrigo]"
Processing section "[ipc$]"
Loaded services file OK.
WARNING: You have some share names that are longer than 8 chars
These may give errors while browsing or may not be accessible
to some older clients
Press enter to see a dump of your service definitions
# Global parameters
[global]
workgroup = MFG4
netbios aliases = pscdv001
server string = Samba Server - Desenvolvimento 3
encrypt passwords = Yes
null passwords = Yes
smb passwd file = /etc/smbpasswd
password level = 8
username level = 8
log level = 0
log file = /var/log/samba/%L/log.%m
max log size = 50
deadtime = 4
socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
include = /usr/local/samba/lib/smb.conf.pscdv001
[rodrigo]
comment = My folder
path = /home/rodrigo
read only = No
create mask = 0775
directory mask = 0775
hosts allow = 187.10.16.XXX
[ipc$]
path = /tmp
hosts allow = 187.10.16.0/23 127.0.0.1
hosts deny = 0.0.0.0/0
_____________________________________________________________________________
From my desktop I mapped the SHARE [rodrigo] and I have no problems to access
it. Therefore, analysing the logs files, specifically the client log file in the
server, I saw some weird messages:
...
[2005/03/15 18:04:18, 0] lib/access.c:check_access(333)
Denied connection from (187.10.16.XXX)
...
The weird thing is that this messages are logged only when I open some file
inside the shared directory from samba. Using "windows explorer", I
mapped the share inside windows explorer and using on the server the command
"tail -f log.client". At the moment of openning file, a tenth of this
messages are logged. The IP address showed is the IP of my Desktop and the open
file operation is sucedeed without any error messages from windows. See also
that in the smb.conf file, on the SHARE [rodrigo] I put a explicit configuration
that allow my host 187.10.16.216 to access that SHARE.
Why these messages are logged ?? What is wrong inside my configuration ?? Is
wrong ?
Tks in advance,
Rodrigo Jos? dos Santos
Solvo S.A.
IT UNIX Administrator Senior (Solaris Specialist)
Computing Engineer
Phone: (55) 19 3847 6003
Fax: (55) 19 3847 6230
Mobile: (55) 19 8111 8560