Re: Jailed Samba not getting broadcasts

Hello Dewayne,

I have encountered a similar problem, when I configured a SAMBA PDC over the wan (through IPSEC of course). You might like to consider using these in your smb.conf:
hosts allow = 10.1. 10.2.
remote announce = 10.1.1.255 10.2.1.255
remote browse sync = 10.1.1.255 10.2.1.255

I have tried that, but no luck. Still can't resolve the NetBIOS name using
solely NetBIOS broadcasts.

If that doesn't solve the need, then perhaps you should modify /etc/devfs.rules in your base system, to behave a little more promiscuously, and include something like:
[devfsrules_samba_jail=6]
add include $devfsrules_hide_all
add include $devfsrules_unhide_basic
add include $devfsrules_unhide_login
add path bpf0 unhide

I also tried that. Of course I also configured "devfsrules_samba_jail" policy for
my jail. So now I can also tcpdump in my jail. But still, those broadcasts seem to
be ignored by samba (although I can see them with tcpdump). This works for you?

Note the latter opens a potential security hole if someone breaches samba jail, providing a means to tcpdump (...) your network

This is not a great concern for me since this will be running locally.

Thanks a lot for your help,
Nejc

_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: ipnat.conf - map and rdr wont work!
    ... Use tcpdump, you should see if your rdr/map rules work as expected. ... Can't help you more, really, you need to investigate where packets are ... if i disable ipnat then map or rdr wont work as they simply disabled ... nothing gets to jail there for no logs inside of jail ...
    (freebsd-questions)
  • Re: After many hours all outbound connections get stuck in SYN_SENT
    ... Back to your SYN_SENT problem, I suppose the remote IP is known, so you ... I've run tcpdump for all IPs during this problem. ... tcpdump reported that some packets were dropped during the capture. ...
    (Linux-Kernel)
  • Re: After many hours all outbound connections get stuck in SYN_SENT
    ... Back to your SYN_SENT problem, I suppose the remote IP is known, so you ... I've run tcpdump for all IPs during this problem. ... tcpdump reported that some packets were dropped during the capture. ...
    (Linux-Kernel)
  • Re: After many hours all outbound connections get stuck in SYN_SENT
    ... Back to your SYN_SENT problem, I suppose the remote IP is known, so you ... I've run tcpdump for all IPs during this problem. ... tcpdump reported that some packets were dropped during the capture. ...
    (Linux-Kernel)
  • Re: After many hours all outbound connections get stuck in SYN_SENT
    ... peer should be a SYN+ACK), ... Then turn off tcp_sack and take a 2nd tcpdump sample, ... I dont understand, why dont you change IPs to mask them with 192.168.X.Y, or just ME, and peer1, peer2, peer... ... remote hosts my application communicates with are on wireless links, ...
    (Linux-Kernel)