diff options
| author | Andrew Tridgell <tridge@samba.org> | 2004-09-24 03:34:55 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 12:59:07 -0500 |
| commit | fe45888e228d1452b8301b3b074794bd443a7fa5 (patch) | |
| tree | c59bffe228cff9b125810effdc88383689236202 /source4/smb_server/service.c | |
| parent | 5d4fc1284ea662029f509a88ca49a2a5812f78f1 (diff) | |
| download | samba-fe45888e228d1452b8301b3b074794bd443a7fa5.tar.gz samba-fe45888e228d1452b8301b3b074794bd443a7fa5.tar.bz2 samba-fe45888e228d1452b8301b3b074794bd443a7fa5.zip | |
r2581: added "hosts allow" and "hosts deny" checking in smbd. I needed this
as my box keeps getting hit by viruses spreading on my companies
internal network, which screws up my debug log badly (sigh).
metze, I'm not sure if you think access.c should go in the socket
library or not. It is closely tied to the socket functions, but you
may prefer it separate.
The access.c code is a port from Samba3, but with some cleanups to
make it (slighly) less ugly.
(This used to be commit 058b2fd99e3957d7d2a9544fd27071f1122eab68)
Diffstat (limited to 'source4/smb_server/service.c')
| -rw-r--r-- | source4/smb_server/service.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/source4/smb_server/service.c b/source4/smb_server/service.c index bc436172a1..5f698fe20b 100644 --- a/source4/smb_server/service.c +++ b/source4/smb_server/service.c @@ -143,6 +143,13 @@ static NTSTATUS make_connection_snum(struct smbsrv_request *req, struct smbsrv_tcon *tcon; NTSTATUS status; + if (!socket_check_access(req->smb_conn->connection->socket, + lp_servicename(snum), + lp_hostsallow(snum), + lp_hostsdeny(snum))) { + return NT_STATUS_ACCESS_DENIED; + } + tcon = conn_new(req->smb_conn); if (!tcon) { DEBUG(0,("Couldn't find free connection.\n")); |