Samba log reporting external access attmpts?

Haarsma, Michael (SAPOL) michael.haarsma at police.sa.gov.au
Tue Oct 17 23:38:29 CST 2006


It means you need to sort out your firewall chop chop. :)

"iptables -P INPUT DROP" is a good place to start.. Then just allow what
you need, not the other way around.

> -----Original Message-----
> From: linuxsa-bounces at linuxsa.org.au 
> [mailto:linuxsa-bounces at linuxsa.org.au] On Behalf Of Rodney Mitchell
> Sent: Wednesday, 18 October 2006 9:13 AM
> To: linuxsa at linuxsa.org.au
> Subject: Samba log reporting external access attmpts?
> 
> 
> 
> Hi All!
> 
> What does this mean?
> 
> 
> lib/util_sock.c:get_peer_name(1188)  Gethostbyaddr failed for 
> 213.19.163.32 : 187 Time(s)
> 
> 
> and ....
> 
> 
> lib/access.c:check_access(328)  Denied connection from 
> 113-104-162.adsl.cust.tie.cl (200.113.104.162) : 1 Time(s)
> 
> 
> Haven't written a script yet to make IPTABLES 
> permanent.....but is this something to do with NETBIOS port 
> packets not being dropped? They were dropped but have had a 
> reboot since then...
> 
> 
> 
> Cheers, Rod.
> 
> -- 
> LinuxSA WWW: http://www.linuxsa.org.au/ IRC: #linuxsa on 
> irc.freenode.net To unsubscribe or change your options:
>   http://www.netcraft.com.au/mailman/listinfo/linuxsa
> 



More information about the linuxsa mailing list