So I understand you right, your main problem is samba, or why did you mention it in the last line???
To make your box completly unavailable to any host, yes, you'll need a firewall, whether on the box you'd like to hide, or use an older machine with 2 nics as a small firewall e.g. like www.ipcop.org to make samba unavailable to others use this in your smb.conf e.g. hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0 or even narrow it down to one host like hosts allow = 127.0.0.1 192.168.1.15/255.255.255.0 hth, simmel to remove the possibility -----Ursprüngliche Nachricht----- Von: Harland Christofferson [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 17. März 2004 20:11 An: [EMAIL PROTECTED] Betreff: subnet seen on intranet i have a network i use for code development branching off of the corporate intranet. the topology is: +---------------+ +-------------+ | 192.168.1.100 |---| 192.168.1.1 | +---------------+ | 10.20.0.0 | engineering3a | 10.20.1.158 |--- to/from intranet wkgrp: speg +-------------+ engineering3 wkgrp: speg on the intranet, engineering3a and engineering3 are seen by other machines that have access to the workgroup speg ... i only want engineering3 NOT engineerting3a seen on the intranet. also, when i ping engineering3 from another machine on the intranet, it resolves 10.20.0.0 as the ip address NOT 10.20.1.158. furthermore, when i ping engineering3a from a machine on the intranet, it resolves 192.168.1.100. i don't even want engineering3a to be seen on the intranet. what is amiss in my configuration of samba? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]