On Wed, Jun 13, 2012 at 04:55:42PM +0300, Gruz wrote:
13.06.12 16:32, Matthias Weckbecker написав(ла):
Hi,
On Wednesday 13 June 2012 15:01:38 Gruz wrote:
Here is the post with the images and additional info:
http://forums.opensuse.org/forums/english/get-technical-help-here/network-i nternet/476052-i-think-its-virus-while-nmbd-running-some-web-sites-redirecte d-broken.html#post2469100
thank you for the pointer.
Post #2 suggests basically what we would recommend too. Apart from that it would also be helpful to see which repositories are being used and if nmbd was configured to resolve names via external windows domains which in turn could be mis-configured or compromised. (I've just learned from Marcus that this could be possible.)
Thanks, Matthias
1. repos:
.... quite a number :/
2. post #2 linux-7dyq:/ # rpm -q --verify samba
rpm -V samba-client too please.
linux-7dyq:/ # Empty result.
3. I use an ADSL modem whis is also my router (DHCP server) and two linux PCs behind it. Nothing more. No specific configuration. Where is the nmbd configuration? So I can show it.
The content of: /etc/nsswitch.conf would point the nameservices to WinS if incorrectly configured. The nmb logfile is in /var/log/samba/log.nmbd ... check if there is something funny in there. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org