nmbd Service Question

Note: I am still very green on Server and many of its functions.

I have Little Snitch 1.2.3 installed on Server 10.4.11.

Occasionally, I will get a warning the nmbd is responding to a requests from external sources. Usually, the urls are quite long and nonsensical.

Should I be blocking this port, or should I just set up a rule in Little Snitch to allow all connections?

Any help or feedback will be greatly appreciated.

Thanks
Gary

Quad G5 2.5 GHz, 4 GB RAM, 1.5 TB HDD, Mac OS X (10.5.8), iLife '09, iWork '09, Final Cut Studio2, DROBO 5TB

Posted on Aug 18, 2009 11:06 AM

3 replies

Gary Sumlak Author

Level 3

673 points

Aug 26, 2009 7:00 PM in response to Gary Sumlak

OK, it seems that no one here knows about this problem, but fortunately, I have found a solution on the MACOSX.COM boards which refers to a Little Snitch forum post.

http://macosx.com/forums/archive/t-40056.html

_____________________________________________
Littlesnitch-talk mailing list
[EMAIL PROTECTED]
http://at.obdev.at/mailman/listinfo/littlesnitch-talk
Re: [Littlesnitch-talk] NMBD again
Little Snitch Support
Mon, 24 Nov 2003 13:56:58 -0800

Hi,

Simply add the following rules.

nmbd Allow connections to your local network
nmbd Deny any connection.

Add the rules manually or simple change one of your existing rules.

How to add a rule manually.
- Open the Little Snitch preference pane within the "System Preferences" application.
- Click on the round "lock" button to unlock the preference pane. You will be asked for your username and password.
- By clicking "New..." you can create a new rule.
- Click "Choose..." to select the application type the path to nmdb (/usr/sbin/nmbd)
- Permission: Select "Allow"
- Server: Select "Any" in your case "local network"
- Port: Select "Any"
- Protocol: Select "Any"
- Click the save Button.

Best regards,
Karl Schwarzott
--
Objective Development
http://www.obdev.at/

Aug 26, 2009 7:27 PM in response to Gary Sumlak

The 'nmbd' is the Samba NetBIOS name resolution daemon. There is no reason to block this at the server's firewall or with Little Snitch -which you are better off not running on your server- or to even be worried about it on your local LAN. If it really worries you -and you don't run or have no intention of ever running SMB services on your server- edit /System/Library/LaunchDaemons/nmdb.plist in Property List Editor.app and add the boolean key 'Disabled', check the checkbox, then save the file.

'nmbd' manpage:

http://developer.apple.com/documentation/Darwin/Reference/ManPages/man8/nmbd.8.h tml

Gary Sumlak Author

Level 3

673 points

Aug 26, 2009 8:01 PM in response to Mabel O'Farrell

Thanks Mabel for the reply. I was beginning to think I was alone here 😉

The SMB service are needed so the occasional Windows PC can access the server and also while Macs are in boot camp, but only from the LAN. It was just disconcerting that I saw all those strange urls.

Thanks for the advice and the assurances. Being "I need to know what this is" kind of guy, I wanted to know if nmbd was a normal function or a hacker trying to access my system.

Thanks

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

nmbd Service Question