Re: Broadcasting unwanted UDP messages

Re: Broadcasting unwanted UDP messages

[Ken Moore]

Thanks to all those who offered suggestions, It certainly helped me move 
a little up the learning curve.
I decided to try the iptables solution(figuring a knowledge of iptables 
will help in future protection from the nasties on the Inet).

The command
"iptables -A OUTPUT -i sm0 -p udp --dport 137 -j DROP"       failed but
"iptables -A OUTPUT -o sm0 -p udp --dport 137 -j DROP"      worked fine.

However       "iptables -L OUTPUT"     revealed

"target     prot     opt    source        destination"
"DROP       udp      --     anywhere     anywhere         udp 
dpt:netbios-ns"

this appears to not identify the "sm0" destination specified in the 
APPEND command.
I guess I need the netbios for communication with Windoz PC's on my 
network so this does not look like a
fix.
What am I doing wrong?.

-- 
Regards - Ken VK4AKM
          Yeppoon, Queensland
          -= Use Open Source Software =-
                 GNU\Linux Debian.

Re: Broadcasting unwanted UDP messages

[Brett Mueller]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Ken,

On 4/19/2006 14:46, Ken Moore wrote:
> The command
> "iptables -A OUTPUT -i sm0 -p udp --dport 137 -j DROP"       failed but
> "iptables -A OUTPUT -o sm0 -p udp --dport 137 -j DROP"      worked fine.

You can only specify an _output_ interface on the OUTPUT chain, likewise
only an _input_ interface works on the INPUT chain.

> However       "iptables -L OUTPUT"     revealed
> 
> "target     prot     opt    source        destination"
> "DROP       udp      --     anywhere     anywhere         udp
> dpt:netbios-ns"
> 
> this appears to not identify the "sm0" destination specified in the
> APPEND command.

Add a "v" (verbose) to the list command to show interfaces in your rules:
"iptables -vL OUTPUT"

> I guess I need the netbios for communication with Windoz PC's on my
> network so this does not look like fix.

A question I have for you is, are you actually *using* Samba?  Are you
sharing a portion of your Linux filesystem or sharing a printer hanging
off of your Linux box with Windows clients?  If the answer is "no," then
you most likely don't need Samba running at all.

73,

Brett, WA7V

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)

iD8DBQFERrWq+/Ps1x4JxWYRAsKKAJ98cFY3RRaBEUbh3vVtSrTCkgB+SgCfQh90
4pFYWiGINzbmqJp503oKKKY=
=zMyQ
-----END PGP SIGNATURE-----

Broadcasting unwanted UDP messages

[Ken Moore]

G'day Folk,

My ax25 system (Debian system with Linpac and Soundcard modem) is 
broadcasting network Samba and Netbios UDP messages.
Being almost illiterate with Linux could someone point me in the right 
direction to stop this.
I have checked the files in /etc/ax25/ but nothing seems to relate.

Where should I start looking?

-- 
Regards - Ken VK4AKM
          Yeppoon, Queensland
          -= Use Open Source Software =-
                 GNU\Linux Debian.

Re: Broadcasting unwanted UDP messages

[Curt Mills]

On Wed, 19 Apr 2006, Ken Moore wrote:

> G'day Folk,
> 
> My ax25 system (Debian system with Linpac and Soundcard modem) is broadcasting
> network Samba and Netbios UDP messages.
> Being almost illiterate with Linux could someone point me in the right
> direction to stop this.
> I have checked the files in /etc/ax25/ but nothing seems to relate.
> 
> Where should I start looking?

www.samba.org perhaps.  There's a Samba config file setting that
tells it not to broadcast on certain ports.  I can't remember what
it is, sorry, but a Google search should find it.  It's a common
problem with AX.25 interfaces.

-- 
Curt, WE7U.				archer at eskimo dot com
http://www.eskimo.com/~archer
  Lotto:  A tax on people who are bad at math. - unknown
Windows:  Microsoft's tax on computer illiterates. - WE7U.
The world DOES revolve around me:  I picked the coordinate system!"

Re: Broadcasting unwanted UDP messages

[John Ronan]

In the Configuration file there is a line "Interfaces"

i.e.

[snip]
# Date: 2003-11-04
[global]
         workgroup = TASMANIA
         Netbios Name = spirit
#       Netbios Aliases = jukebox
         os level = 65
         log level = 3
         security = share
         time server = Yes
         passdb backend = tdbsam guest

    obey pam restrictions = yes

         unix extensions = Yes
         encrypt passwords = Yes
         guest account = Nobody
         map to guest = Bad User
         printing = CUPS
         printcap name = CUPS
         socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
#       wins support = No
         veto files = /*.eml/*.nws/riched20.dll/*.{*}/
         hosts allow = 10.0.4.
         wins support = yes
         local master = yes
         preferred master = yes
         domain master = yes
         interfaces = 10.0.4.162
         ^^^^^^^^^^^^^^^^^^^^
[snip]

Try that.

Regards
John

On 19 Apr 2006, at 04:50, Curt Mills wrote:

> On Wed, 19 Apr 2006, Ken Moore wrote:
>
>> G'day Folk,
>>
>> My ax25 system (Debian system with Linpac and Soundcard modem) is  
>> broadcasting
>> network Samba and Netbios UDP messages.
>> Being almost illiterate with Linux could someone point me in the  
>> right
>> direction to stop this.
>> I have checked the files in /etc/ax25/ but nothing seems to relate.
>>
>> Where should I start looking?
>
> www.samba.org perhaps.  There's a Samba config file setting that
> tells it not to broadcast on certain ports.  I can't remember what
> it is, sorry, but a Google search should find it.  It's a common
> problem with AX.25 interfaces.
>
> -- 
> Curt, WE7U.				archer at eskimo dot com
> http://www.eskimo.com/~archer
>   Lotto:  A tax on people who are bad at math. - unknown
> Windows:  Microsoft's tax on computer illiterates. - WE7U.
> The world DOES revolve around me:  I picked the coordinate system!"
> -
> To unsubscribe from this list: send the line "unsubscribe linux- 
> hams" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

--
John Ronan <jronan@tssg.org>, +353-51-302938
Telecommunications Software &  Systems Group,  http://www.tssg.org

Re: Broadcasting unwanted UDP messages

[Jarmo]

John Ronan kirjoitti viestissään (lähetysaika keskiviikko, 19. huhtikuuta 2006 
>          interfaces = 10.0.4.162
>          ^^^^^^^^^^^^^^^^^^^^
> [snip]
>
> Try that.

If you use 10 series subnet, you have change "remote announce" into 10.x.x.255
If 192 series something like below.

;   interfaces = 192.168.12.2/24 192.168.13.2/24
# *** merged from original smb.conf: ***
   interfaces = 192.168.0.1/24

# Configure remote browse list synchronisation here
#  request announcement to, or browse list sync from:
#       a specific host or from / to a whole subnet (see below)
;   remote browse sync = 192.168.3.25 192.168.5.255
# Cause this host to announce itself to local subnets here
;   remote announce = 192.168.1.255 192.168.2.44
# *** merged from original smb.conf: ***
   remote announce = 192.168.0.255

Jarmo


-- 
Linux is the answer.
What was your question?
(Brian Lane)
-
To unsubscribe from this list: send the line "unsubscribe linux-hams" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: Broadcasting unwanted UDP messages

[Jeremiah]

On Tuesday 18 April 2006 20:46, Ken Moore wrote:
> G'day Folk,
>
> My ax25 system (Debian system with Linpac and Soundcard modem) is
> broadcasting network Samba and Netbios UDP messages.
> Being almost illiterate with Linux could someone point me in the right
> direction to stop this.
> I have checked the files in /etc/ax25/ but nothing seems to relate.
>
> Where should I start looking?

You want to look at /etc/samba/samba.conf. Or what I have done is to use swat. 
I think it is installed with the samba packages, but I'm not sure. (Suse has 
it installed when you install webmin) 
With webmin installed you go to "your-ip":10000 and log in as root. Then go to 
servers, samba, swat. Then when in swat go to global and under base options 
there is "interfaces" you need to set that for the IP of the interface you 
want samba to be on. Then hit commit changes, restart smbd and after that 
samba will only use the interface that has the IP addres that you put into 
that filed. 

There at lest is the GUI way to do it for those who don't like command lines. 
Webmin is a wonderful thing ^_^


Jeremiah
KD7DMP