From owner-freebsd-questions Sun Dec 15 16:25:57 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BBCF537B401 for ; Sun, 15 Dec 2002 16:25:56 -0800 (PST) Received: from smtp01.mrf.mail.rcn.net (smtp01.mrf.mail.rcn.net [207.172.4.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 21B6B43ED1 for ; Sun, 15 Dec 2002 16:25:56 -0800 (PST) (envelope-from rjhalljr@starpower.net) Received: from 66-44-67-223.s477.tnt7.lnhva.md.dialup.rcn.com ([66.44.67.223] helo=sten.alder.net) by smtp01.mrf.mail.rcn.net with smtp (Exim 3.35 #4) id 18Nj4u-0005e7-00 for freebsd-questions@freebsd.org; Sun, 15 Dec 2002 19:25:50 -0500 Received: by sten.alder.net (sSMTP sendmail emulation); Sun, 15 Dec 2002 19:25:08 -0500 Date: Sun, 15 Dec 2002 19:25:08 -0500 From: "Bob Hall" To: FreeBSD Questions List Subject: Re: scanning the smbd port Message-ID: <20021216002508.GA4108@sten.alder.net> Mail-Followup-To: Bob Hall , FreeBSD Questions List References: <20021214092331.GA7429@sten.alder.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20021214092331.GA7429@sten.alder.net> User-Agent: Mutt/1.4i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Dec 14, 2002 at 04:23:31AM -0500, Bob Hall wrote: > I looked in the archives, but I didn't find anything on this. I've gotten > a number of messages like the following: > > Dec 13 22:37:20 sten inetd[6015]: refused connection from 61-231-96-100.HINET-IP > .hinet.net, service smbd (tcp)itten > > They seem to come from all over. In addition to Taiwan, they come from > Pakistan, Japan, and my own local ISP. My interpretation is that they are > scanning smbd ports. Is this correct, and why Samba? Never mind. When I googled instead of just searching the mail archives, I got lots of info on this. > Also, I've got the following in /etc/hosts.allow: > > ALL : localhost 127.0.0.1 : allow > ALL : 192.162.0/24 : allow > ALL : ALL : deny > > I don't want to provide any services outside of the local network. I > want the hosts inside the local network to be able to request services > out on the Internet. Is there a better way of doing this? And some more research turned up my errors in this. Bob Hall To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message