40

SMB is a file sharing protocol and, as such, it is sometime left open to the internet for, well, sharing files. However, this is a very bad idea. Compared to simpler protocol as FTP or WebDAV, which basically have very small GET/PUT interfaces and are entirely implemented in isolated userspace processes, SMB is a much more complex protocol, deeply ...


23

If the accepted answer gives you this error; System error 1219 has occurred. Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again. You'll need to first remove the existing shares. If you're in a hurry, this ...


18

I did find a way to do this. Hopefully this helps someone else looking for the same information. On the server, open a powershell then enter this command: Get-SmbSession | Select-Object -Property ClientComputerName,ClientUserName,Dialect For more verbose output: Get-SmbSession | Select-Object -Property *


12

On my network - as of this writing (things do change) - smbtree is my preferred solution. It asks for your password (meaning your Samba password), and then it gives a nicely detailed list that includes netbios name, available shares, and the share description. nmblookup, on the other hand, does not list all the available shares on my network. I do not know ...


12

You basically have it. User vs Machine vs Share Authentication SMB/CIFS bases access on user credentials of some sort (whether they be KRB tokens, user/password pairs, or what have you) per session where each session is mapped to one user. NFSv3 uses host-based authentication where all users of a given remote machine share the same connection. SMB/CIFS, ...


12

NFS: it has a partial support for sparse file. Basically, it supports creating a sparse file but, when reading, the file is expanded to include zeroes. This means that, while you can create a sparse file via NFS, when reading back that very same file the in-transit network data will include any zeroes found on the original file. A simple test show that ...


11

This really piqued my interest. I was able to replicate your findings in my lab with the same pattern of results that you describe. I used Procmon to to try to see what changes are made and almost gave up until I saw the following: That shows lsass.exe (Local Security Authority) writing to the local SAM and making a change(s) to the built-in Guest account (...


11

I believe that doing this will allow users to delete files from their desktop/documents folder etc, and still provide a way to restore from the recycle bin. I can confirm that with Folder Redirection, Recycle Bin still works on Windows 2008R2. Probably works on 2012 as well. But Folder Redirection and WinXP clients for example, Recycle Bin does not work....


10

NFS Yes, NFS 4.2 fully supports sparse files (see this canonical document and this presentation). Prior to NFS 4.2, the NFS client/server model supported sparse files in the sense that the API supported all POSIX file operations. This meant that writing sparse files on a server which supported sparse files on the backing file system resulted in a sparse file ...


9

You're probably missing the fact that Offline Files must be enabled on the client side in order for files and programs accessed from the Share to be cached offline. Additionally, only files and programs that have been opened from the Share are made available offline. Simply accessing the Share doesn't cache it's contents in the Offline Files cache.


8

https://nmap.org/nsedoc/scripts/smb-protocols.html Example Usage nmap -p445 --script smb-protocols <target> nmap -p139 --script smb-protocols <target>


8

Durable handles are part of SMB 2.0 Resilient handles are part of SMB 2.1 Persistent handles are part of SMB 2.2 which is now called SMB3 My main references for the following are: https://wiki.samba.org/index.php/SMB3_kernel_status and although this was originally for Samba3, it has more details: https://wiki.samba.org/index.php/Samba3/SMB2 Durable file ...


8

If you have Windows 8.1 or 2012, you can use the PowerShell cmdlet Get-SmbConnection for that. To interpret the answer (copied and pasted from here): SMB 1 - Windows 2000 SMB 2 - Windows Server 2008 and WIndows Vista SP1 SMB 2.1 - Windows Server 2008 R2 and Windows 7 SMB 3.0 - Windows Server 2012 and Windows 8 Sample output: ServerName ...


8

In general any ransomware can encrypt anything the infected user has access to, like any other malware can write to anywhere using the permissions of the account running it. That doesn't equal it becoming active for other users, but it can affect all shares the user has access to. Countermeasures: Prevent with virus protection & firewall, as usual. ...


8

Just don't do it. If anyone asks you to do it, I would strongly recommend telling them no and running away fast. You could technically provide this kind of service over a VPN, but if it's over any significant distance over WAN it's almost certainly going to perform like total garbage. There are far superior services to accomplish remote and local file ...


8

The NAS is a 2U Synology Rack set up in SMB 2.0 and higher mode. Plenty of space on the share (and NAS). The server is Windows 2012 R2 SMB 2.xx is your problem. You need SMB 3.xx to allow Hyper-V running VMs from your file share. https://blogs.technet.microsoft.com/yungchou/2012/09/10/windows-server-2012-hyper-v-over-smb-explained/


7

This configuration worked for me: 137/UDP, 138/UDP, 139/TCP and 445/TCP. Source and additional information at: http://www.icir.org/gregor/tools/ms-smb-protocols.html. So these are the iptables rules for my Samba server: # The router doesn't need SMB access. -A INPUT -s 192.168.1.1 -p udp --dport 137 -j REJECT -A INPUT -s 192.168.1.1 -p udp --dport 138 -j ...


7

In samba version 4, nmblookup '*' no longer works; it only gives the local server. It used to work in samba version 3. Now, you have to use nmblookup WORKGROUP, which as Kurt mentioned, only returns servers in workgroup WORKGROUP.


7

"smb 445 tcp filtered" does not means that something is listening on port 445. From nmap man page: Filtered. means that a firewall, filter, or other network obstacle is blocking the port so that Nmap cannot tell whether it is open or closed


7

SMB protocol handshake is always SMB, for backwards compatibility. The connection is upgraded later on. If you deny all packets with SMB headers, no connection will be established. You cann see this in a successful protocol negotiation:


7

NextCloud has WebDAV functionality / integration and can replicate data between off-site <-> on-premises in the way you want. This is no open source / free software, but you might want to give it a try. https://nextcloud.com/files/ P.S. I have nothing to do with this company, just in case :)


6

a better way, more fiendly printed, is to use smbtree. $ smbtree Enter user01's password: DOMAIN_A \\FREEBOX_SERVER Freebox Server \\FREEBOX_SERVER\IPC$ IPC Service (Freebox Server) \\FREEBOX_SERVER\Disque dur AutoShare of fbxhdiskd partition 2


6

Another way to do this is via Avahi (Bonjour), as long as the servers are publishing: avahi-browse -r _smb._tcp


6

Windows Server 2012 includes a new SMB (3.0) transport encryption option. http://blogs.technet.com/b/filecab/archive/2012/05/03/smb-3-security-enhancements-in-windows-server-2012.aspx


6

On Windows 8 and higher, you can use the powerhsell command Get-SmbConnection to check which SMB version is used per connection.


6

The reason is most likely that Sever 2003 R2 uses SMB 1.0, While Server 2008 R2 uses SMB 2.1. The linked article there has a table which shows what version of the protocol you'll be able to use with which client-server combinations. A connection to Server 2003 R2 will always be limited to SMB 1.0. The newer versions of the SMB protocol include many ...


6

I am presented with SMB, NFS and iSCSI options to connect to the server. Meaning, I have the option of either setting up a share via NFS or SMB or creating a virtual iSCSI drive in which I can connect to. For direct connection to a server—for true server related storage—iSCSI is the way to go. And you would then manage the user access—via SMB/CIFS or ...


6

First, this seems a common problem with DS213j and DSM 5.1+. Someone reported that after a reboot, the problem went away: have you tried it? From your top data, it seems that the CPU is busy with system time, ie: doing some syscall. Try changing the following parameters in the smb.conf file and then restart the NAS: change notify = no kernel change notify =...


6

Is there any reason? I will leave that up to you. It can be done. Open port 445 and config SMB and you can access your shared folders over the internet similar to how you would do it over your local network. It's going to be very slow because the protocol was not designed to work over such environment. There are known security risks. IP restriction could ...


6

No. Leave the minimum number of ports exposed to the Internet. If you need to use SMB for something (transferring files with a trusted other party, with authentication and timestamps on every action taken), then set up a VPN for them to connect to before making an SMB connection.


Only top voted, non community-wiki answers of a minimum length are eligible