This is Interesting: Free IT Magazines  
Home > Archive > Samba > June 2004 > [Samba] want to ban XP Home Edition





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author [Samba] want to ban XP Home Edition
Michal Kurowski

2004-06-29, 8:43 pm

Just for sake of curiosity:

Is that possible ?
I'd like to support XP Pro *only* and to ban any other Windows OS
(no 2000 server or 2003 server machines in here).

Samba works in domain mode with Ldap backend.

Cheers,

--
Michal Kurowski
perl -e '$_=q#: 13_2: 12/o{>: 8_4) (_4: 6/2^-2; 3;-2^\2: 5/7\_/\7: 12m m::#;
y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print'

--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Malcolm Baldridge

2004-06-29, 8:43 pm


> Just for sake of curiosity:
>
> Is that possible ?
> I'd like to support XP Pro *only* and to ban any other Windows OS


There are some very advanced networking stacks which allow you to specify
filtering based on TCP fingerprints. OpenBSD does, for example.

I don't know if XP Home and XP Pro have different enough fingerprints to
allow a reliable discrimination between them.

This is a puzzling request, though. I am assuming that these unwanted hosts
can change their ip#, thus evading firewall/smb.conf based access lists.

It's easier to distinguish between XP versus 2000 versus 95, 98, Me, and
NT4, etc. Those have rather different fingerprints.

If you don't use OpenBSD, I suppose you could make use of nmap to perform a
quick on-the-fly OS fingerprint and then pull up a firewall against that
ip#, thus blocking the unwanted user(s).

It seems to me that it'd be simpler to just allow access only from certain
domains, etc.

Malcolm
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2010 webservertalk.com