LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-04-2011, 06:11 PM   #1
honorcode
LQ Newbie
 
Registered: Apr 2011
Posts: 4

Rep: Reputation: 0
Samba on WAN


Hello all:

Is it safe to put Samba Server outside your Firewall?

Thank you
 
Old 04-04-2011, 07:47 PM   #2
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 332Reputation: 332Reputation: 332Reputation: 332
It depends on your threshold of 'safe'. Personally, I only allow access via ssh or openvpn. Then again, if you're using ssh, you can just use sshfs instead of samba, and not have to worry about unexpected local access (like via WiFi, for example).
 
Old 04-04-2011, 08:24 PM   #3
michaelk
Moderator
 
Registered: Aug 2002
Posts: 14,965

Rep: Reputation: 1530Reputation: 1530Reputation: 1530Reputation: 1530Reputation: 1530Reputation: 1530Reputation: 1530Reputation: 1530Reputation: 1530Reputation: 1530Reputation: 1530
Welcome to LinuxQuestions.
No, SMB protocol is not secure.

http://www.linuxquestions.org/questi...1/#post2906075

Last edited by michaelk; 04-04-2011 at 08:27 PM.
 
Old 04-04-2011, 08:40 PM   #4
jefro
Moderator
 
Registered: Mar 2008
Posts: 15,409

Rep: Reputation: 2207Reputation: 2207Reputation: 2207Reputation: 2207Reputation: 2207Reputation: 2207Reputation: 2207Reputation: 2207Reputation: 2207Reputation: 2207Reputation: 2207
At least use a GRE tunnel or greater.

http://www.linuxquestions.org/questi...ternet-589665/

If you can find the old barracudaserver that was free it was a neat way to use https.
 
Old 04-04-2011, 08:44 PM   #5
thund3rstruck
Member
 
Registered: Nov 2005
Location: East Coast, USA
Distribution: Fedora 18, Slackware64 13.37, Windows 7/8
Posts: 360

Rep: Reputation: 40
Absolutely not. There are so many vulnerabilities and attack vectors in the SMB/NMB protocol that it would take an entire page to list them all. Trust me when I say that the last thing you wanna do is broadcast a service listening on ports 137/139 on the public internet.

Setup a VPN server (or at the least SSH) if you want to expose samba to remote users.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Connectivity problem with Mandrake Linux 10.1 LAN/WAN/Samba Server BiO|Happy Linux - Networking 3 05-05-2005 03:51 PM
Connectivity problem with network on Mandrake 10.1 LAN/WAN/Samba BiO|Happy Linux - Wireless Networking 0 04-29-2005 05:11 PM
FreeS/Wan Vs. OpenS/Wan Vs. StrongS/Wan bkankur Linux - Security 1 03-01-2005 10:27 AM
samba symlinks accross a wan jse580 Linux - Newbie 1 02-27-2004 08:58 AM
Samba is Slow w/ FreeS/WAN and Sentinel prismbiz Linux - Networking 5 12-14-2003 05:59 AM


All times are GMT -5. The time now is 06:29 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration