Re: [Samba] How secure is SMB3 over internet?
- Date: Sat, 20 Oct 2018 04:54:41 +0200
- From: Reindl Harald via samba <samba@xxxxxxxxxxxxxxx>
- Subject: Re: [Samba] How secure is SMB3 over internet?
Am 19.10.18 um 20:04 schrieb jmqaodmthr1acosyg--- via samba:
> How secure is SMB3 over Internet? I see that Microsoft Azure is doing SMB3 shares over internet so they seem to think it's secure.
> Does the SAMBA team recommend this type of scenario OR do they recommend instead running it over a SSH tunnel/VPN?
i won't even consider it
ports 137,138,139,445 ar eblocked outgoing here and any inbound
connection on that ports will reject your source-ip for some seconds on
any prot over the whole network
it's in general not wise to expose uncommon public services (common =
http, ssh, ftp, email) to the web without a ssh-tunnel and if it only
because the next security issue don't bother you that much
surely, patches have to be applied anyways but there is a difference in
patch services only reachable withina tunnel and patch exposed services
To unsubscribe from this list go to the following URL and read the