hosts_allow

[Igaduma]

Hi all,

I'm trying to disable all access from certain IP adress, and that is a big list.
It's easier to allow 172.31.11 access and everybody else not.

When using the hosts allow option and putting in 172.31.11 or 172.31.11.* or 172.31.11.0 the whole service is blocked.

Any advice?

Thanks
Iga-Duma

 

[jad]

try:

hosts allow = 172.31.11.0/255.255.255.0

 

Hi Jad,

aaah! The whole netmask bit too!

Thanks

Iga-Duma

 

Quick one:

Can I use the host_allow option to allow a certain netbios name ?

Thanks

 

[jad]

i dont believe so. but dont quote me on it i believe that netbios names can be spoofed far more easily than ip addresses.

if you want to be even more sure of the ip address accessing your machine you can always look at the 'bind interfaces only' command and set the 'interfaces' if you have more than one.

 

Hi Jad,

Works perfect, only the subnet on which it listens has access to the samba shares.

Thanks,

Iga-Duma