topic Re: Limiting CIFS connections by address? in Alfresco Archive

Limiting CIFS connections by address?

cbhank — Wed, 19 Aug 2009 09:54:00 GMT

Hello,I would like to restrict the CIFS subsystem to listen not only on one of the box's two network interfaces (done, works great) - but also respond only to connection requests sourced from specific networks on the wire.How can this be achieved?Version: Community - v3.2.0 (2056)Best regards,Mark

Re: Limiting CIFS connections by address?

mikeh — Wed, 19 Aug 2009 10:56:30 GMT

That sounds more like a job for a firewall (software or hardware) - if you're on a Linux system, check "iptables".

Thanks,
Mike

Re: Limiting CIFS connections by address?

cbhank — Wed, 19 Aug 2009 12:10:37 GMT

Yes, however these sorts of things can be done simply and internally with most other services like apache and samba … I am hoping it can be configured internally, otherwise your idea is definitely worth pursuing.

Thanks for the input!

Re: Limiting CIFS connections by address?

tommy — Sun, 23 Aug 2009 10:28:27 GMT

Hi chbank,

Interested knowing how you proceed to restrict CIFS subsystem to listen to only one of your box's two network interfaces.
Thanks

Re: Limiting CIFS connections by address?

cbhank — Thu, 08 Oct 2009 09:00:44 GMT

In file-servers.properties I did this:

cifs.bindto=192.168.10.40
cifs.broadcast=192.168.10.255

This is the IP held by that interface. That pretty much took care of it. However, I never went further regarding limiting the source connections. Our firewall takes care of that from the outside.