[OpenIndiana-discuss] binding CIFS to a specific interface?

[Ryan John]

On 23/07/2013, at 4:00 PM, Carl Brewer <carl at bl.echidna.id.au> wrote:

> 
> 
> I haven't had any luck googling for this, except for using IPF.
> 
> Is it possible to bind OI (151a8) CIFS to one interface - I have a server which sits on an Internet link and my LAN with two ethernet interfaces and I only want CIFS to listen on the LAN interface.
> 
> Possible? (I know I can block it with IPF, but that's not the best way, IMO). Best way to do it?
> 
> Thanks!
> 
> Carl
> 
> 
> _______________________________________________
> OpenIndiana-discuss mailing list
> OpenIndiana-discuss at openindiana.org
> http://openindiana.org/mailman/listinfo/openindiana-discuss

Hi Carl,

I haven't done this under openIndiana, but in Solaris, you can restrict access the same as you would in NFS, like:

<quote>
zfs set sharesmb=ro=hostname[:hostname] dataset
zfs set sharesmb=rw=hostname[:hostname] dataset
zfs set sharesmb=none=hostname[:hostname] dataset
hostname can be a host name, a netgroup, or an IP address. dataset is the name of the dataset.
</quote>

It's in the Solaris CIFS Administration Guide - How to Restrict Client Host Access to a CIFS Share (zfs)
For nfs anyway, you can specify a network like @192.168.1.0/24 - I guess this also works for CIFS.

I think this introduced in openSolaris, so it will probably work in OI.

Cheers
John