samba - Jun 2004 - hosts allow and partial subnet

dear list members

how can i restrict access to samba with the "hosts allow"
configuration
for only part of a subnet without having to list all the individual 
ip-numbers?

e.g. we have the subnet 123.123.123.1 - 123.123.123.512 and i would 
like that only the hosts with the ip numbers between 
123.123.123.237-123.123.123.319 have access. how can i do this?

all hostnames have the following schema "groupname-c##" where ## is a 
simple number. i guess that something like "hosts allow = 
groupname-c##" is not possible with samba?

regards,
marc

Hi,

If you're using Samba 3, you can use "hostname lookups = yes" to
allow
you to use hostnames instead of IP addresses for settings, but bear in
mind the extra load this will cause.

Is there any way you could re-arrange the IP address allocation?  It's a
big job, but any solution here looks like it will be.

Finally, what about iptables?  You could block them off completely that
way.

I hope this helps,

Mark Lidstone
IT and Network Support Administrator

BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122         
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:mark.lidstone@bmtseatech.co.uk
Website: www.bmtseatech.co.uk
========================================================================Confidentiality
Notice and Disclaimer:
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.
========================================================================  

-----Original Message-----
From: Marc Petitmermet [mailto:petitmermet@mat.ethz.ch] 
Sent: 30 June 2004 09:16
To: samba@lists.samba.org
Subject: [Samba] hosts allow and partial subnet


dear list members

how can i restrict access to samba with the "hosts allow"
configuration
for only part of a subnet without having to list all the individual 
ip-numbers?

e.g. we have the subnet 123.123.123.1 - 123.123.123.512 and i would 
like that only the hosts with the ip numbers between 
123.123.123.237-123.123.123.319 have access. how can i do this?

all hostnames have the following schema "groupname-c##" where ## is a 
simple number. i guess that something like "hosts allow = 
groupname-c##" is not possible with samba?

regards,
marc

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

> Is there any way you could re-arrange the IP address allocation?
this is not possible. we have one huge subnet which is shared between 
different groups.

if there is not a better solution i use "hosts allow = @groupname" 
where groupname is a nis netgroup (but then i would have to maintain 
these maps too) or use the include feature so that the smb.conf does 
not get cluttered with huge amounts of ip addresses.

something like "hosts allow = 123.123.123.237-319" would be really 
nice, though.

regards,
marc