From 4ea9be5467b6274ec2074af8c6438d42415d8fb6 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Mon, 7 Apr 2003 14:01:19 +0000 Subject: Regenerate docs (This used to be commit 3d61303ea9783e01796a90e74efb3457ef76497f) --- docs/htmldocs/securing-samba.html | 45 +++++++++++++++++++++++++-------------- 1 file changed, 29 insertions(+), 16 deletions(-) (limited to 'docs/htmldocs/securing-samba.html') diff --git a/docs/htmldocs/securing-samba.html b/docs/htmldocs/securing-samba.html index b1ecb68ce4..3cee4ac6b4 100644 --- a/docs/htmldocs/securing-samba.html +++ b/docs/htmldocs/securing-samba.html @@ -74,14 +74,14 @@ CLASS="CHAPTER" >Chapter 23. Securing SambaChapter 24. Securing Samba

23.1. Introduction24.1. Introduction

This note was attached to the Samba 2.2.8 release notes as it contained an @@ -93,8 +93,8 @@ CLASS="SECT1" >

23.2. Using host based protection24.2. Using host based protection

In many installations of Samba the greatest threat comes for outside @@ -103,8 +103,17 @@ any host, which means that if you run an insecure version of Samba on a host that is directly connected to the Internet you can be especially vulnerable.

One of the simplest fixes in this case is to use the 'hosts allow' and -'hosts deny' options in the Samba smb.conf configuration file to only +>One of the simplest fixes in this case is to use the hosts allow and +hosts deny options in the Samba smb.conf configuration file to only allow access to your server from a specific range of hosts. An example might be:

23.3. Using interface protection24.3. Using interface protection

By default Samba will accept connections on any network interface that @@ -161,8 +170,8 @@ CLASS="SECT1" >

23.4. Using a firewall24.4. Using a firewall

Many people use a firewall to deny access to services that they don't @@ -191,8 +200,8 @@ CLASS="SECT1" >

23.5. Using a IPC$ share deny24.5. Using a IPC$ share deny

If the above methods are not suitable, then you could also place a @@ -230,11 +239,15 @@ CLASS="SECT1" >

23.6. Upgrading Samba24.6. Upgrading Samba

Please check regularly on http://www.samba.org/ for updates and +>Please check regularly on http://www.samba.org/ for updates and important announcements. Occasionally security releases are made and it is highly recommended to upgrade Samba when a security vulnerability is discovered.