Samba log reporting external access attmpts?
Haarsma, Michael (SAPOL)
michael.haarsma at police.sa.gov.au
Tue Oct 17 23:38:29 CST 2006
It means you need to sort out your firewall chop chop. :)
"iptables -P INPUT DROP" is a good place to start.. Then just allow what
you need, not the other way around.
> -----Original Message-----
> From: linuxsa-bounces at linuxsa.org.au
> [mailto:linuxsa-bounces at linuxsa.org.au] On Behalf Of Rodney Mitchell
> Sent: Wednesday, 18 October 2006 9:13 AM
> To: linuxsa at linuxsa.org.au
> Subject: Samba log reporting external access attmpts?
>
>
>
> Hi All!
>
> What does this mean?
>
>
> lib/util_sock.c:get_peer_name(1188) Gethostbyaddr failed for
> 213.19.163.32 : 187 Time(s)
>
>
> and ....
>
>
> lib/access.c:check_access(328) Denied connection from
> 113-104-162.adsl.cust.tie.cl (200.113.104.162) : 1 Time(s)
>
>
> Haven't written a script yet to make IPTABLES
> permanent.....but is this something to do with NETBIOS port
> packets not being dropped? They were dropped but have had a
> reboot since then...
>
>
>
> Cheers, Rod.
>
> --
> LinuxSA WWW: http://www.linuxsa.org.au/ IRC: #linuxsa on
> irc.freenode.net To unsubscribe or change your options:
> http://www.netcraft.com.au/mailman/listinfo/linuxsa
>
More information about the linuxsa
mailing list