Blocking access to file sharing (AFP/SMB) from outside of network

Question

Level 1

0 points

Blocking access to file sharing (AFP/SMB) from outside of network

Hello all,

Is there a way to block access to file shares from outside of our LAN? I have a machine that has some sharing turned on (it is also my email server) and I can reach it across the internet and mount shares as if I was in the office.

How can I block this access? Both SMB and AFP?

Thank you,

-John

Pro, Mac OS X (10.5.6)

Posted on Mar 19, 2009 9:44 AM

Reply

Answer 1

Mar 19, 2009 9:53 AM in response to johnlenz

You should get a firewall, or turn NAT on your router. This is a networking question.

With that said, you could also create a whitelist and hard code it into UNIX's smb and afp, but this is complicated, and could get over wrote with updates from Apple.

Reply

Answer 2

johnlenz Author

Level 1

0 points

Mar 19, 2009 10:22 AM in response to Justin Andrews

Justin, thank you for your reply. The machine is on a public ip address and is not behind a NAT router. I've turned on the software firewall and that is working now. However, I imagine it would be better to use a hardware firewall. Any suggestions on a good one? Thank you.

Reply

Answer 3

Mar 19, 2009 10:42 AM in response to johnlenz

If it's just a small office setup, sonicwall makes some decent products that are good prices in a range for these types of offices.

Reply