Samba

Badic config example
[global]
    workgroup = WORKGROUP
    server string = Share Server

    interfaces = lo eth0
    bind interfaces only = yes

    hosts allow = 127. 192.168.12. 192.168.13.

    block size = 4096

    log file = /var/log/samba/log.%U
    log level = 1 vfs:1
    max log size = 1000
    syslog = 7
    syslog only = no

    server role = standalone server

    security = share
    passdb backend = tdbsam
    local master = no
    wins support = no
    load printers = no

    map to guest = bad user
    guest account = nobody
    usershare allow guests = yes

    unix charset = UTF-8
    unix extensions = no
    allow insecure wide links = yes
    wide links = yes
    follow symlinks = no
    nt pipe support = no

    delete veto files = Yes
    veto files = /*.exe/*.bat/*.com/*.pif/*.scr/

[homes]
  comment = Home Directories
  browseable = no
  writable = yes
  valid users = %S

[pubic]
  comment = Public Share
  hosts allow = 192.168.0.0/24 192.168.1.0/24 192.168.2.12
  path = /data/public
  force create mode = 0644
  create mode = 0644
  force directory mode = 0775
  directory mode = 0775
  writable = yes
  browseable = yes
  public = yes
  printable = no
  only guest = yes
  guest ok = yes 
  vfs object = full_audit
  full_audit:prefix = %u|%I
  full_audit:success = mkdir rmdir unlink write rename pwrite
  full_audit:failure = none
  full_audit:facility = local5
  full_audit:priority = notice

Syslog for Samba
echo "local5.notice /var/log/samba_audit.log" > /etc/rsyslog.d/samba.conf