40
votes
Is there any reason to allow SMB over the internet?
SMB is a file sharing protocol and, as such, it is sometime left open to the internet for, well, sharing files.
However, this is a very bad idea. Compared to simpler protocol as FTP or WebDAV, which ...
- 50.7k
19
votes
Accepted
How do I find out what version of SMB is in use by each attached client to a Windows Server 2016?
I did find a way to do this. Hopefully this helps someone else looking for the same information.
On the server, open a powershell then enter this command:
Get-SmbSession | Select-Object -Property ...
- 433
17
votes
Accepted
How do I find out what version of SMB is enabled on a remote host?
https://nmap.org/nsedoc/scripts/smb-protocols.html
Example Usage
nmap -p445 --script smb-protocols <target>
nmap -p139 --script smb-protocols <target>
- 186
10
votes
How do I find out what version of SMB is enabled on a remote host?
On Windows 8 and higher, you can use the powerhsell command Get-SmbConnection to check which SMB version is used per connection.
- 373
9
votes
Accepted
Cache of share in windows server
You're probably missing the fact that Offline Files must be enabled on the client side in order for files and programs accessed from the Share to be cached offline. Additionally, only files and ...
- 111k
9
votes
Accepted
Difference between durable file handles, resilient file handles and persistent file handles
Durable handles are part of SMB 2.0
Resilient handles are part of SMB 2.1
Persistent handles are part of SMB 2.2 which is now called SMB3
My main references for the following are:
https://wiki.samba....
- 12.9k
9
votes
TCP/IP ports necessary for CIFS/SMB operation
This configuration worked for me: 137/UDP, 138/UDP, 139/TCP and 445/TCP. Source and additional information at: http://www.icir.org/gregor/tools/ms-smb-protocols.html.
So these are the iptables rules ...
- 99
9
votes
Is there any reason to allow SMB over the internet?
Just don't do it. If anyone asks you to do it, I would strongly recommend telling them no and running away fast.
You could technically provide this kind of service over a VPN, but if it's over any ...
- 7,136
8
votes
Listing available smb shares on a network through the command line in linux
In samba version 4, nmblookup '*' no longer works; it only gives the local server. It used to work in samba version 3.
Now, you have to use nmblookup WORKGROUP, which as Kurt mentioned, only ...
- 121
8
votes
Accepted
How do you check what version of Server Message Block client a workstation is using on Windows?
If you have Windows 8.1 or 2012, you can use the PowerShell cmdlet Get-SmbConnection for that.
To interpret the answer (copied and pasted from here):
SMB 1 - Windows 2000
SMB 2 - Windows ...
- 18.6k
8
votes
Accepted
Can "wannacrypt" (wcrypt) spread via Linux server serving over SMB?
In general any ransomware can encrypt anything the infected user has access to, like any other malware can write to anywhere using the permissions of the account running it. That doesn't equal it ...
- 49.8k
8
votes
Accepted
SMBv2 and Windows 7
SMB protocol handshake is always SMB, for backwards compatibility. The connection is upgraded later on. If you deny all packets with SMB headers, no connection will be established.
You cann see this ...
- 4,917
8
votes
Accepted
Moving Hyper-V virtual disk to SMB share gives file not found error in the end
The NAS is a 2U Synology Rack set up in SMB 2.0 and higher mode. Plenty of space on the share (and NAS). The server is Windows 2012 R2
SMB 2.xx is your problem. You need SMB 3.xx to allow Hyper-V ...
- 14.1k
8
votes
Samba SMB Encryption - How safe is it?
You could see the Encryption in SMB 3.0: A protocol perspective and Encryption in SMB3 for technical details, but I think the fact that Azure Files allows mounting over the Internet using (only) SMB3 ...
- 49.8k
8
votes
Accepted
Why does a MS GPO option break SMB shares that use a hosts file for the machine name?
It's not about the 'hosts' file – it breaks shares accessed through a different hostname than the server's "real" name. Your result is normal, as that's literally the whole purpose of the ...
- 11.4k
7
votes
Is there any reason to allow SMB over the internet?
No. Leave the minimum number of ports exposed to the Internet. If you need to use SMB for something (transferring files with a trusted other party, with authentication and timestamps on every action ...
- 275
7
votes
Expose Fileserver (SMB) over WEB / HTTP(S) Interface
NextCloud has WebDAV functionality / integration and can replicate data between off-site <-> on-premises in the way you want. This is no open source / free software, but you might want to give it a ...
- 14.1k
7
votes
No write permission on mounted CIFS drive
CIFS share will be mounted as root using your command, so normal user not able write anything there. You need to specify the user and group ID for whom you want to assign read/write permission. You ...
- 1,056
6
votes
Listing available smb shares on a network through the command line in linux
a better way, more fiendly printed, is to use smbtree.
$ smbtree
Enter user01's password: DOMAIN_A
\\FREEBOX_SERVER Freebox Server
\\FREEBOX_SERVER\IPC$ ...
- 61
6
votes
Listing available smb shares on a network through the command line in linux
Another way to do this is via Avahi (Bonjour), as long as the servers are publishing:
avahi-browse -r _smb._tcp
- 173
6
votes
Cannot view or map drives by host shortname
As Noor Khaldi says it could be a problem related with NetBios or the TCP Helper of NetBios.
The destination computer and the client one are in the same local domain? It could be a problem related ...
- 472
6
votes
Accepted
High CPU Load on Synology by smbd
First, this seems a common problem with DS213j and DSM 5.1+. Someone reported that after a reboot, the problem went away: have you tried it?
From your top data, it seems that the CPU is busy with ...
- 50.7k
6
votes
Is there any reason to allow SMB over the internet?
Is there any reason? I will leave that up to you.
It can be done. Open port 445 and config SMB and you can access your shared folders over the internet similar to how you would do it over your local ...
- 2,006
6
votes
KB 4480970 and or KB 4480960 breaks SMB2 connections to Windows 7 shares
EDIT 14Jan2019:- please see the new accepted answer instead, it contains the official fix instead of this work-around.
I'm posting an answer in the hope others find it easier to find here than I did ...
- 243
6
votes
Expose Fileserver (SMB) over WEB / HTTP(S) Interface
Pydio has Web UX for CIFS/SMB shares:
https://pydio.com
- 9,126
5
votes
High CPU Load on Synology by smbd
I had also the same problem with :
random slow load problem when I navigate into folder with Windows Explorer
hight CPU usage by the smbd process (~50%) when the random problem that talk about ...
5
votes
Can SMB Direct be used together with a SMB network share on one NAS?
SMB works over TCP, SMB Direct works over RoCEv/1v2 (UDP) or iWARP (TCP) encapsulation.
https://en.wikipedia.org/wiki/RDMA_over_Converged_Ethernet
https://en.wikipedia.org/wiki/IWARP
If NIC ...
- 14.1k
5
votes
Disable SMB sharing for specific NIC on server 2012
It's a bad idea to use dedicated cabling (+non-redundnant in your case!) for SMB and iSCSI traffic. It would be much better idea to chunk physical LANs with VLANs, configure QoS and give both SMB and ...
- 14.1k
4
votes
How can I find what file/user is consuming all the bandwidth on an SMB share?
Finding the remote machine is easy:
Just use Resource Monitor. Go to the 'Network' tab, expand "Network Activity", sort by Send(B/s). Your culprits will have the highest current Network traffic.
...
- 1,389
4
votes
Difference between durable file handles, resilient file handles and persistent file handles
More about persistent handles...Persistent handles are available across several servers of the same cluster. When one server goes down for any reason, the client machine can semi-transparently ...
- 176
Only top scored, non community-wiki answers of a minimum length are eligible