Guest vance Posted December 20, 2002 Report Share Posted December 20, 2002 Hoping for some help with Samba. I have been getting some (what I consider wierd) ip reporting in the samba logs. These ip's that are being recorded in the logs are not ip's that i use. Here is a copy of the log file: [2002/12/20 08:04:37, 0] smdb/service.cmake_connection(252) 50163099sp (146.83.???.???) couldn't find service c as well as [2002/12/20 08:07:55, 01] lib/access.c:check_access(333) Denied connection from (213.123.???.???) [2002/12/20 08:07:55, 01] lib/debug.c:reopen_logs(348) Unable to open new log file /usr/local/samba/var/samba.log: No such file or directory There are many of the above with different ips. I am not sure if this is an attack or email being sent in??? Any help would be greatly appreciated. Quote Link to comment Share on other sites More sharing options...
MottS Posted December 21, 2002 Report Share Posted December 21, 2002 Samba uses ports 137, 138 and 139 and mail server/client uses different ports so it is probably an attack or just people trying to connect to your server from the net. Do you share stuff only on your LAN ? Do you have 2 nics ? How is your hardware configured ? Do you configured smb.conf to ask for encripted password ? MOttS Quote Link to comment Share on other sites More sharing options...
Guest vance Posted December 23, 2002 Report Share Posted December 23, 2002 Thankyou for your help Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.