
#-----------------------------------------------------------------------
# CHANGES
#-----------------------------------------------------------------------
#
# 2001-04-20  Dougal Holmes <dholmes@bigpond.net.au>
#             Initial module v5.1.1
#
#-----------------------------------------------------------------------
# MODULE CONFIGURATION
#-----------------------------------------------------------------------
#
#m# 123
#a# ignore
#i# 
#n# smb
#t# broadcasts
#
#   |--------------------------------------------------------------------|
#d# The SMB, Netbios, and Lanman protocols are used for file sharing with
#d# MS-Windows, OS/2 and UNIX Samba servers.
#d#
#d# This option ignores broadcasts from SMB devices
#   |--------------------------------------------------------------------|
#
#-----------------------------------------------------------------------
# START OF MODULE CODE
#-----------------------------------------------------------------------

for host in `Option_Value ignore $INTOPT smb broadcasts`
do
	echo "Ignore $INTOPT $BROADCAST SMB <- $host SMB $LOG_MSG"

	ipchains -A $INCHAIN  -j DENY   -p udp -s $host   netbios-ns   -d $BROADCAST netbios-ns $LOG
	ipchains -A $INCHAIN  -j DENY   -p udp -s $host   $UNPRIVPORTS -d $BROADCAST netbios-ns $LOG

	ipchains -A $INCHAIN  -j DENY   -p udp -s $host   netbios-dgm  -d $BROADCAST netbios-dgm $LOG
	ipchains -A $INCHAIN  -j DENY   -p udp -s $host   $UNPRIVPORTS -d $BROADCAST netbios-dgm $LOG

done
unset host

