Welcome to FreeSoftwareServers Confluence Wiki

This is really only usefull in my home environment. As anybody can request a static IP without accessing router. BUT nobody in my house WILL do that! This allows me to easily block any device I havn't given static IPs to. (non of my devices obviously) I prefer IP based Allow/Deny with SMB especially @ home because the alternative is a linux daemon authorizing windows credentials and I find that much more complicated then setting the DHCP pool on my router to!

Example /etc/samba/smb.conf


path = /path/to/share
available = yes
hosts allow = 10.
hosts deny =
read only = no
browseable = yes
public = yes
writable = yes

OR for Public

hosts allow = 192.168.1. 10.
hosts deny = = loopback = ALLOW (Static POOL)
10. = entire 10.*.*.* network = DENY (DHCP Pool) 


PS: The hosts allow overrides the host deny.

  • No labels