re: samba and firewall

> I have samba running ok , but I've noticed that there may be a port
> opened that is allowing outside connection to the samba port.  I can
> only assume this because there are a lot of .log files in the
> /var/log/samba .  Can someone tell me which ports I need to make sure is
> blocked off so the users on the inside can still access samba and
> outside access is blocked.  The internal users should only be accessing
> samba via eth0 only and the localhost or subnet.  All others should be
> blocked.

Using what packet filter?

Generally, you should masq everything originating from the internal
network to the world, and disallow anything coming from the world that is
not related to anything originating from the internal network.

For iptables, see the netfilter-HOWTO, and the ipchains-HOWTO for
ipchains. Both are easily found on google.

HTH
-- 
Keith Mastin
BeechTree Information Technology Services Inc.
Toronto, Canada
(416)696 6070