[chinc]

Just like it says..

I can't write to any of my shared folders. Getting irritating! I tried turning "allow guest" and "writeable" but neither worked. I can browse, but I really badly need to write. The file is within /var - is this a problem?

Secondly I would like to not allow any IP's but the internal network for security.

[Squashman]

What are the permissions on /var

drwxr-xr-x 23 root root 4096 Aug 19 13:19 var

Is this server sitting behind a Router?
What version of Linux are you running?
Do you know if you have a firewall running on the server?
Do an iptables -L as root. Post the info if any back here.

Using a router with a NAT/Firewall or a firewall running on the server would be two ways to block it from the Internet.

[codejockey]

I think the Squashman has already asked all the right questions for your write problem. You can use the hosts allow and hosts deny keywords in the [global] section of your smb.conf file to specify those addresses that you will accept connections from. For example, I use:

hosts deny = ALL
hosts allow = 172.16.0. 172.16.1. 127.

This (first) denies all connections (hosts deny) and then allows connections for IP addresses beginning with 172.16.0 and 172.16.1 (the machines on my local network) as well as the localhost (127.*).

Hope this helps.

[Squashman]

Been a long time since I used Samba, I dont have it installed on my server curretnly, so I could not remember if that was in the conf file or not.

My biggest fear is that the server is directly connected to the internet without a firewall or natted behind a router.

[chinc]

First off I use a firewall.. there isn't one on the machine, but I have an external box.

Secondly, I tried changing the permissions to 777 and that didn't help.

[codejockey]

It's possible your smb.conf file is missing some entries. For example, do you have a section similar to the following:

[public]
comment = Public Stuff
path = /var
public = yes
writable = yes
printable = no

If you post your smb.conf file, that might be helpful.

Hope this helps.

[Squashman]

Originally posted by chinc:
First off I use a firewall.. there isn't one on the machine, but I have an external box.

Secondly, I tried changing the permissions to 777 and that didn't help.

Usually not a good idea. I assume the owner and group are still root. Try changing the group to a group that has your users in it.

Could you post the relevant portions of your samba config file.

[chinc]

[file_server]
comment = xxxxxxxx
locking = no
writeable = yes
public = yes
path = /var/www/html/files

I changed the group to a group my users are in..

[Squashman]

Originally posted by chinc:
[file_server]
comment = xxxxxxxx
locking = no
writeable = yes
public = yes
path = /var/www/html/files

I changed the group to a group my users are in..

so the permissions on the files directory are this:

drwxrwxr-x 23 root group 4096 Aug 19 13:19 files

[chinc]

After doing a chmod -R 777 files I was able to write to the directories.. but I assume this isn't the safest way to do things?

[Squashman]

What about 774

[chinc]

Nope...

774 = no write.

[Squashman]

Open up a shell prompt

cd /var/www/html

ls -l

copy and paste. I just want to see it for myself.

[chinc]

drwxr-xr-x 2 www www 4096 Oct 30 22:03 addon-modules/
-rw-r--r-- 1 www www 1406 Mar 4 2003 favicon.ico
drwxrwxrwx 8 root www 4096 Nov 6 10:28 files/
-rw-r--r-- 1 www www 6295 Mar 4 2003 index.shtml
-rw-r--r-- 1 www www 153 Mar 4 2003 optim.html
-rw-r--r-- 1 www www 609 Mar 4 2003 platform.html

[Squashman]

So all your users are in the group www