Man smb.conf
For name service it causes nmbd to bind to ports 137 and 138
on
the interfaces listed in the interfaces parameter. nmbd
also
binds to the "all addresses" interface (0.0.0.0) on
ports
137
and 138 for the purposes of reading broadcast messages. If
this
option is not set then nmbd will service name requests on all
of
these sockets. If bind interfaces only is set then nmbd
will
check the source address of any packets coming in on the
broad-
cast sockets and discard any that don't match the
broadcast
addresses of the interfaces in the interfaces parameter list.
As
unicast packets are received on the other sockets it allows
nmbd
to refuse to serve names to machines that send packets
that
arrive through any interfaces not listed in the interfaces
list.
IP Source address spoofing does defeat this simple check,
how-
ever, so it must not be used seriously as a security feature
for
nmbd.
>-----Original Message-----
>From: samba-bounces+thiagolima=webforce.com.br@lists.samba.org
>[mailto:samba-bounces+thiagolima=webforce.com.br@lists.samba.or
>g] On Behalf Of thomas k.
>Sent: Thursday, February 05, 2004 10:11 PM
>To: samba@lists.samba.org
>Subject: [Samba] what is nmbd doing on all interfaces?
>
>hi,
>
>i just noticed the following running netstat:
>
>udp 0 0 192.168.1.100:137 0.0.0.0:* 19862/nmbd
>udp 0 0 0.0.0.0:137 0.0.0.0:* 19862/nmbd
>udp 0 0 192.168.1.100:138 0.0.0.0:* 19862/nmbd
>udp 0 0 0.0.0.0:138 0.0.0.0:* 19862/nmbd
>
>in my smb.conf i got:
>
> interfaces = eth0
> bind interfaces only = yes
>
>so what is nmbd doing on all interfaces? i hope it is not
>trying to reach other samba servers out there or is it?
>
>thomas
>
>
>
>
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions: http://lists.samba.org/mailman/listinfo/samba