From owner-freebsd-security  Tue Jun 13 11:13:18 2000
Delivered-To: freebsd-security@freebsd.org
Received: from saturn.terahertz.net (saturn.terahertz.net [216.165.129.80])
	by hub.freebsd.org (Postfix) with ESMTP id B82DB37B92B
	for <freebsd-security@FreeBSD.ORG>; Tue, 13 Jun 2000 11:13:12 -0700 (PDT)
	(envelope-from sideshow@terahertz.net)
Received: from localhost (sideshow@localhost)
	by saturn.terahertz.net (8.9.3/8.9.3) with ESMTP id NAA33625;
	Tue, 13 Jun 2000 13:06:41 -0500 (CDT)
Date: Tue, 13 Jun 2000 13:06:41 -0500 (CDT)
From: Matt Watson <sideshow@terahertz.net>
To: Kameron Gasso <kgasso@blort.org>
Cc: Szilveszter Adam <sziszi@petra.hos.u-szeged.hu>,
	freebsd-security@FreeBSD.ORG
Subject: Re: netbios
In-Reply-To: <Pine.LNX.4.20.0006131055040.12595-100000@gate.blort.org>
Message-ID: <Pine.BSF.4.21.0006131306030.29640-100000@saturn.terahertz.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Kameron, actually see if they are already running in the background, nmbd
and smbd generally run as daemons and not from inetd.conf.

-- Matt Watson
   TeraHertz Communications 

On Tue, 13 Jun 2000, Kameron Gasso wrote:

> On Tue, 13 Jun 2000, Szilveszter Adam wrote:
> > On Tue, Jun 13, 2000 at 12:33:56PM -0500, Matt Watson wrote:
> > > NetBIOS should only be open if your running samba.  Incase you don't know
> > > NetBIOS is a part of windows' (at least its mostly used with
> > > windows) network communication protocol for filesharing and printer
> > > sharing etc.  You should be able to see the daemon running as 'nmbd' and
> > > 'smbd'  you'll want to kill both of them.  However its obviously being
> > > started at bootup time in your case, i'm not sure where freebsd would keep
> > > the startup for samba, probably /etc/rc.conf or /etc/rc.local.  If you
> > > don't find samba running i don't know whjat else it would be... i've never
> > > seen anything but samba use it.  You could find out using 'sockstat'.
> > 
> > Startup scripts for programs installed from ports (and Samba is such a
> > program) can be found in /usr/local/etc/rc.d/ and are named like
> > <progname>.sh. You want to delete or rename it for it not to run at startup.
> > 
> smbd/nmbd have their own inetd.conf entries in 4.0-RELEASE:
> 
> wibbly# grep "mbd" *
> inetd.conf:#netbios-ssn stream tcp nowait root /usr/local/sbin/smbd smbd
> inetd.conf:#netbios-ns dgram udp wait root /usr/local/sbin/nmbd nmbd
> 
> I also see nothing else regarding the two in /etc, /etc/defaults, or the
> like.
> 
> checking on my 3.4-RELEASE box, results are the same.
> 
> Cheers,
> 
> -Kameron
> (kgasso@blort.org)
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message