[SOLVED]samba and ipv6

z0id · 2012-01-08 11:23:30

My ISP recently enabled ipv6 so now I have a dual stack network. In the process of checking which services are ipv6 enabled, I saw this:

tcp6       0      0 :::445                  :::*                    LISTEN      17588/smbd          
tcp6       0      0 :::139                  :::*                    LISTEN      17588/smbd

I don't want samba to listen on the global ipv6 address since there is no NAT in ivp6 (I'm assuming this will make smbd visible to the internet). I tried setting the ipv4 subnet in hosts allow in smbd.conf, but it doesn't affect ipv6.
How do I disable ipv6 from samba, or make it listen only on the link local address?

Last edited by z0id (2012-02-06 14:36:21)

z0id · 2012-02-06 14:36:04

fixed with

   interfaces = 10.5.5.99
   bind interfaces only = Yes

Kind of a no brainer...

revellion · 2012-02-10 08:00:39

Do you have real native IPv6 connectivity?. if so then putting a filter in might be a good idea.

If not.. then you can't really be reached over IPv6 so no problem.

Also putting interfaces =
can be problematic should you ever re-number your network or change IP of the host.

z0id · 2012-02-10 10:37:57

revellion wrote:

Do you have real native IPv6 connectivity?. if so then putting a filter in might be a good idea.

Yes, I have native IPv6. What kind of filter are you referring to?

revellion · 2012-02-12 12:56:56

Depending on how your IPv6 is delivered to your network you might consider using ip6tables on either the SMB host or the IPv6 router if it's running Linux.

such as implementing a "state tracker" which is the real security in the combination NAT is used in . NAT is merely rewritting addresses, and the state tracker keeps track of connections made so it can remember who's related to an local host going out and not letting external hosts in without a relation to an internal host's connection.

Arch Linux

#1 2012-01-08 11:23:30

[SOLVED]samba and ipv6

#2 2012-02-06 14:36:04

Re: [SOLVED]samba and ipv6

#3 2012-02-10 08:00:39

Re: [SOLVED]samba and ipv6

#4 2012-02-10 10:37:57

Re: [SOLVED]samba and ipv6

#5 2012-02-12 12:56:56

Re: [SOLVED]samba and ipv6

Board footer