Ticket #103 (closed defect: fixed)

Opened 11 months ago

Last modified 11 months ago

service definition: samba

Reported by: daenney Owned by: victor
Priority: minor Milestone: undecided
Component: suite Version:
Keywords: Cc:

Description

Currently, the samba service defined by default in vuurmuur is a tidbit too restrictive killing for example the auto-discovery feature loved by so many Windows users in the Network pane. 

UDP="137*137"
UDP="138*138"
UDP="137*1024:65535"
UDP="1024:65535*137"

Should become 

UDP="137:138*137:138"
UDP="137:138*1024:65535"
UDP="1024:65535*137:138"

This is according to the "Securing Samba" guide on samba.org. Though that guide also suggests allowing for UDP traffic on port 135 but that is rarely used anymore, modern versions of smbd don't even bind to that port anymore.

Change History

Changed 11 months ago by victor

  • status changed from new to closed
  • resolution set to fixed

Fixed by changeset:254.

Note: See TracTickets for help on using tickets.