[WBEL-users] Samba deny hosts, Allow hosts

Kirby Bohling kbohling@birddog.com
Wed, 5 May 2004 12:52:39 -0500


On Wed, May 05, 2004 at 04:21:11PM +0100, Denis Croombs wrote:
> Hi
> 
> I am having a major problem with stoping some systems from seeing a share, I
> have used Webmin to add the following to the smb.conf any clues as to why
> 10.0.0.16 can still see files in this share ?
> 
> [staff]
>           comment = confidential staff info
>           path = /samba/staff
>           hosts allow = 10.0.0.13 10.0.0.20
>           hosts deny = 0.0.0.0/24

If you cut and paste this correctly, the reason is obvious, the deny
doesn't cover the IP range of 10.0.0.16.

It will block 0.0.0.0 - 0.0.0.255 (the Class C network that starts
at 0.0.0.0).  You probably meant, either 10.0.0.0/8, 10.0.0.0/24 or
0.0.0.0/0.  It would appear that for some reason if your allowed,
but not denied that you are getting access.  Which appears to be
consistant with section 5 of the "hosts_allow" man page.

	Thanks,
		Kirby

> 
>   Thanks
> 
>   Denis
> 
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> Marvin the E-Mail scanner
> 
> _______________________________________________
> Whitebox-users mailing list
> Whitebox-users@beau.org
> http://beau.org/mailman/listinfo/whitebox-users
>