Samba log message

[Bill Campbell]

On Sat, Sep 03, 2005, Alan Jackson wrote:
>The past few days the following has been showing up in my logs :
>
> 
> Connections Denied:
>    lib/access.c:check_access(328)  192.168.0.5 : 357 Time(s)
>    smbd/process.c:process_smb(1084) 192.168.0.5 : 357 Time(s)
> 
> Forced Election:
>    In workgroup MSHOME when announced server was:
>       BOHLER-BLECHE(192.168.0.6) : 9 Time(s)
>
>What the heck is BOHLER-BLECHE and where is that coming from??
>
>$ ping 192.168.0.6
>PING 192.168.0.6 (192.168.0.6) 56(84) bytes of data.
>>From 192.168.0.2 icmp_seq=1 Destination Host Unreachable

Anything in 192.168.0.0/16 is non-routable private addresses which
shouldn't be passing any Interrnet router.

It's possible that somebody is forging it as a source address from the
'Net, but it really doesn't make much sense other than possibly as a denial
of service attempt since nothing would ever be able to reply to that source
address.

On the other hand, 192.168.0.0/24 is a fairly common subnet for commodity
router boxes and WI-FI routers so it's entirely possible that somebody
might be playing silly buggers through a local box.

Bill
--
INTERNET:   bill at Celestial.COM  Bill Campbell; Celestial Software LLC
UUCP:               camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

Make no laws whatever concerning speech and, speech will be free; so soon as
you make a declaration on paper that speech shall be free, you will have a
hundred lawyers proving that ``freedom does not mean abuse, nor liberty
license;'' and they will define and define freedom out of existence.
	- Voltarine de Cleyre (1866-1912)