> While I don't have the Samba setup docs in front of me, there should be a
> way to have it ignore your outside interface (if this is in fact what you
> want).
in the global section
interfaces = 192.168.1.2/24 (same as 192.168.1.2 with netmask set to
255.255.255.0) xxx.xxx.xxx.xxx/xx
> Other than that I don't think you'll be opening up any more security holes
> than you would by running anything else (did that make sense?).
Aside from violating the run as few services as possible rule.
There is the root directory option for the truly paranoid. Redefines the root
directory for samba. It is not easy to set up though.
Here is "Using Samba" by Oreilly.
http://us1.samba.org/samba/oreilly/using_samba/
it does not cover the root directory option
that is from "Samba Integrating UNIX and Windows"
****************************************************************************
* To UNSUBSCRIBE from the list, send a message with "unsubscribe lug-nuts"
* in the message body to majordomo@saclug.org. Please direct other
* questions, comments, or problems to lug-nuts-owner@saclug.org.
This archive was generated by hypermail 2b29 : Fri Feb 11 2000 - 16:20:24 PST