Close ports 137 and 138 samba server?

Hi,

I have a linux box with samba server and two network interface. One
interface for internet and another for local network. I used the samba
commands:
bind interface only true
interfaces 192.168.10.1/24

And the samba stop to listen on internet interface on port 139, but it
continue listening on ports 137 and 138 on both interface. How to stop
listen on this ports on internet interface only?
I´m using iptables to filter this ports, but i´d like to close this
ports on interface.

Thanks in advance!

To listen to only one port on an interface, you should just be able to specify it in /etc/samba/smb.conf, ie:

Code:

---

smb ports = 139

---

To listen on a specific interface only, specify it in /etc/samba/smb.conf by its name or IP:

Code:

---

interfaces = eth0

---

or

Code:

---

interfaces = 192.168.0.5

---

These commands can go at the top in your global section.

Thanks by help, but i tried to use interface = eth1, but don´t resolve the problem. The linux continue with ports 137 (udp) and 138 (udp) open on interface eth0.

Thanks again

You'll need to set the interfaces option like KeyserSoze said but you also need to add this option:

Code:

---

bind interfaces only = yes

---

Setting the interfaces option only tells Samba which interface to use when sending data. The bind interfaces only options tells it to also listen on that interface.


You can find more information in Using Samba, Chapter 4.