OSX Server Security Breach ?

Hi all,

I am using a Mac Mini (10.4.11, 2nd gen 1.66 CD, 2 GB Ram, 2 TB storage) as my file- and ftp server. My Mini is connected to a GB-switch (my Macbook is connected as a client to that switch) and then the switch is connected to a router downstairs which is used in my student home (with 4 other people using the LAN). I want to be the only one able to access it for filesharing from my Macbook (as I don't want to serve my 2TB in data to the internet or my room mates just yet )

Here is my problem; i regularly restart my server, and last time I did I got the message below. There were 3 file sharing clients connected to my Mini eek: Aaaargh!!!!) How is this possible (I am sure it weren't my room mates, as they (and their laptops) were not on the network that time) ???? Where do these connected clients come from ?? The internet (which would be a nightmare/security breach, right)??

My question; how can I check and manage the number of clients connected to my Mini at any time. How can I ban people from using my Mini. What is a good way to lock down my Mini server (I use a firewalled router, OSX Firewall (stealth mode/udp blocking) and Norton Internet Security (including Firewall) simultaneously ).
I thought I was protected with 3 firewalls, but I am not. I felt exposed to the internet, and I don't know where to start securing this server. Am I overlooking something here ?? Please, any advice would be greatly appreciated.

Thanks from Holland

Maybe I was not clear ??

OK, maybe I was not clear ??My basic question is, how can I see who is connected to my server as a file sharing client ?? Obviously there were clients connected who shouldn't have been. (see image below). Anyone, anyone at all please ????

Please please Help!!!

Ok so 2 days, no response . I don't know if my question is not straightforward enough, or whether I am asking the wrong question. I searched the internet and found these apps to monitor connected Apple file share users http://www.hornware.com. This is maybe step 1 to a solution, as it enables me to at least monitor who's connected. However my problem remains; Where do these clients come from, and what is the security risk ?? Isn't there anyone who knows something about file sharing, fileservers etc ?? Please any response would be appreciated

Consultant said:

Well you said 4 other people on your lan.
Other people can access your public folder.

Or if you have weak password people might have guessed it.

Perhaps iTunes music sharing is on?

Maybe the wireless network is not secured.

Click to expand...

Dear consultant,

thanks so much for your response!! However, I am sure my room mates were not on the LAN, in fact I should have been the only one connected at that time. My password is 16 characters long, and is very hard to guess, so I don't see a problem there.
Itunes music sharing is off (only file sharing and remote desktop are turned on and protected by the OSX firewall). The wireless network is safe enough (WPA), I am sure there were no unauthorised clients connected to the wireless network at the time.

I understand these are all factors to check, but I am reasonably sure these are not the problem.

Again, I really don't understand where these clients came from. Are there other ways to check this ?? And what are the security risks when unauthorised file sharing clients are connected. Do they have acces to the full 2 TB, the current user files or only to the Guest folder ???

Any further help would be greatly appreciated!!