 | | | iptables problem | iptables problem 2006-04-10 - By lstar
Back
Hi All,
I would like to ask an " iptables" question
which port should i block if i need to restrict access samba services?
I have search the information from knowledgebase of redhat offical web site. it
found following port
a.. Port 137 (UDP) - NetBIOS name service and nmbd
b.. Port 138 (UDP) - NetBIOS datagram service
c.. Port 139 (TCP) - File and printer sharing and smbd
d.. Port 389 (TCP) - for LDAP (Active Directory Mode)
e.. Port 445 (TCP) - NetBIOS was moved to 445 after 2000 and beyond, (CIFS)
f.. Port 901 (TCP) - for SWAT
Should I port all above port to restrict the access to samba services
or any specific port also enough ?
Regards
lstar
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=big5">
<META content="MSHTML 6.00.2800.1528" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi All,</FONT></DIV>
<DIV><FONT face=Arial size=2>I would like to ask an " iptables"
question</FONT></DIV>
<DIV><FONT face=Arial size=2>which port should i block if i need to restrict
access samba services?</FONT></DIV>
<DIV><FONT face=Arial size=2>I have search the information from knowledgebase
of
redhat offical web site. it found following port</FONT></DIV>
<UL>
<LI><FONT size=2><FONT face=Arial><TT class=command>Port 137 </TT>(UDP) -
NetBIOS name service and <TT class=command>nmbd</TT> </FONT></FONT>
<LI><FONT size=2><FONT face=Arial><TT class=command>Port 138 </TT>(UDP) -
NetBIOS datagram service </FONT></FONT>
<LI><FONT size=2><FONT face=Arial><TT class=command>Port 139 </TT>(TCP) -
File
and printer sharing and <TT class=command>smbd</TT> </FONT></FONT>
<LI><FONT size=2><FONT face=Arial><TT class=command>Port 389</TT> (TCP) - for
LDAP (Active Directory Mode) </FONT></FONT>
<LI><FONT size=2><FONT face=Arial><TT class=command>Port 445 </TT>(TCP) -
NetBIOS was moved to 445 after 2000 and beyond, (CIFS) </FONT></FONT>
<LI><FONT size=2><FONT face=Arial><TT class=command>Port 901</TT> (TCP) - for
SWAT </FONT></FONT></LI></UL>
<DIV><FONT face=Arial size=2>Should I port all above port to restrict the
access
to samba services</FONT></DIV>
<DIV><FONT face=Arial size=2>or any specific port also enough ?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Regards</FONT></DIV>
<DIV><FONT face=Arial size=2>lstar</FONT></DIV></BODY></HTML>
__ ____ ____ ____ ____ ____ ____ ____ ____ ____
Redhat-install-list mailing list
Redhat-install-list@(protected)
https://www.redhat.com/mailman/listinfo/redhat-install-list
To Unsubscribe Go To ABOVE URL or send a message to:
redhat-install-list-request@(protected)
Subject: unsubscribe
|
|
|