From owner-freebsd-questions  Sat Dec 14  1:24: 0 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D3BCC37B401
	for <freebsd-questions@freebsd.org>; Sat, 14 Dec 2002 01:23:59 -0800 (PST)
Received: from smtp02.mrf.mail.rcn.net (smtp02.mrf.mail.rcn.net [207.172.4.61])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4D53243EC5
	for <freebsd-questions@freebsd.org>; Sat, 14 Dec 2002 01:23:59 -0800 (PST)
	(envelope-from rjhalljr@starpower.net)
Received: from 66-44-91-76.s584.tnt4.lnhva.md.dialup.rcn.com ([66.44.91.76] helo=sten.alder.net)
	by smtp02.mrf.mail.rcn.net with smtp (Exim 3.35 #4)
	id 18N8Wb-0004vb-00
	for freebsd-questions@freebsd.org; Sat, 14 Dec 2002 04:23:58 -0500
Received: by sten.alder.net (sSMTP sendmail emulation); Sat, 14 Dec 2002 04:23:31 -0500
Date: Sat, 14 Dec 2002 04:23:31 -0500
From: "Bob Hall" <rjhalljr@starpower.net>
To: FreeBSD Questions List <freebsd-questions@freebsd.org>
Subject: scanning the smbd port
Message-ID: <20021214092331.GA7429@sten.alder.net>
Mail-Followup-To: Bob Hall <bob@FreeBSD.ORG>,
	FreeBSD Questions List <freebsd-questions@freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4i
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I looked in the archives, but I didn't find anything on this. I've gotten 
a number of messages like the following:

Dec 13 22:37:20 sten inetd[6015]: refused connection from 61-231-96-100.HINET-IP
.hinet.net, service smbd (tcp)itten

They seem to come from all over. In addition to Taiwan, they come from 
Pakistan, Japan, and my own local ISP. My interpretation is that they are 
scanning smbd ports. Is this correct, and why Samba?

Also, I've got the following in /etc/hosts.allow:

ALL : localhost 127.0.0.1 : allow
ALL : 192.162.0/24 : allow
ALL : ALL : deny

I don't want to provide any services outside of the local network. I 
want the hosts inside the local network to be able to request services 
out on the Internet. Is there a better way of doing this?

Bob Hall

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message