diff options
Diffstat (limited to 'docs/smbdotconf/base/bindinterfacesonly.xml')
| -rw-r--r-- | docs/smbdotconf/base/bindinterfacesonly.xml | 15 |
1 files changed, 7 insertions, 8 deletions
diff --git a/docs/smbdotconf/base/bindinterfacesonly.xml b/docs/smbdotconf/base/bindinterfacesonly.xml index 67bb2302e7..0fd302ceaa 100644 --- a/docs/smbdotconf/base/bindinterfacesonly.xml +++ b/docs/smbdotconf/base/bindinterfacesonly.xml @@ -16,15 +16,14 @@ binds to the "all addresses" interface (0.0.0.0) on ports 137 and 138 for the purposes of reading broadcast messages. If this option is not set then <command moreinfo="none">nmbd</command> will service - name requests on all of these sockets. If <parameter moreinfo="none">bind interfaces - only</parameter> is set then <command moreinfo="none">nmbd</command> will check the + name requests on all of these sockets. If <smbconfoption name="bind interfaces only"/> is set then <command moreinfo="none">nmbd</command> will check the source address of any packets coming in on the broadcast sockets and discard any that don't match the broadcast addresses of the - interfaces in the <parameter moreinfo="none">interfaces</parameter> parameter list. + interfaces in the <smbconfoption name="interfaces"/> parameter list. As unicast packets are received on the other sockets it allows <command moreinfo="none">nmbd</command> to refuse to serve names to machines that send packets that arrive through any interfaces not listed in the - <parameter moreinfo="none">interfaces</parameter> list. IP Source address spoofing + <smbconfoption name="interfaces"/> list. IP Source address spoofing does defeat this simple check, however, so it must not be used seriously as a security feature for <command moreinfo="none">nmbd</command>.</para> @@ -36,9 +35,9 @@ for machines that are serving PPP or other intermittent or non-broadcast network interfaces as it will not cope with non-permanent interfaces.</para> - <para>If <parameter moreinfo="none">bind interfaces only</parameter> is set then +<para>If <smbconfoption name="bind interfaces only"/> is set then unless the network address <emphasis>127.0.0.1</emphasis> is added - to the <parameter moreinfo="none">interfaces</parameter> parameter + to the <smbconfoption name="interfaces"/> parameter list <citerefentry><refentrytitle>smbpasswd</refentrytitle> <manvolnum>8</manvolnum></citerefentry> and <citerefentry><refentrytitle>swat</refentrytitle> <manvolnum>8</manvolnum></citerefentry> may not work as expected due @@ -47,9 +46,9 @@ <para>To change a users SMB password, the <command moreinfo="none">smbpasswd</command> by default connects to the <emphasis>localhost - 127.0.0.1</emphasis> address as an SMB client to issue the password change request. If - <parameter moreinfo="none">bind interfaces only</parameter> is set then unless the + <smbconfoption name="bind interfaces only"/> is set then unless the network address <emphasis>127.0.0.1</emphasis> is added to the - <parameter moreinfo="none">interfaces</parameter> parameter list then <command moreinfo="none"> + <smbconfoption name="interfaces"/> parameter list then <command moreinfo="none"> smbpasswd</command> will fail to connect in it's default mode. <command moreinfo="none">smbpasswd</command> can be forced to use the primary IP interface of the local host by using its <citerefentry><refentrytitle>smbpasswd</refentrytitle> |