Ticket #103 (closed defect: fixed)

Opened 2 years ago

Last modified 2 years ago

service definition: samba

Reported by: daenney Owned by: victor
Priority: minor Milestone: undecided
Component: suite Version:
Keywords: Cc:

Description

Currently, the samba service defined by default in vuurmuur is a tidbit too restrictive killing for example the auto-discovery feature loved by so many Windows users in the Network pane.

UDP="137*137"
UDP="138*138"
UDP="137*1024:65535"
UDP="1024:65535*137"

Should become

UDP="137:138*137:138"
UDP="137:138*1024:65535"
UDP="1024:65535*137:138"

This is according to the "Securing Samba" guide on samba.org. Though that guide also suggests allowing for UDP traffic on port 135 but that is rarely used anymore, modern versions of smbd don't even bind to that port anymore.

Change History

comment:1 Changed 2 years ago by victor

  • Status changed from new to closed
  • Resolution set to fixed

Fixed by changeset:254.

Note: See TracTickets for help on using tickets.