Samba through Internet
 

Hi, I want to get Samba running on my server so I'll be able to connect to certain directories on the server using Samba. This way I do not have to use an FTP-Client or tunnel, but can simply mount the network drive ("add network drive" for Windows).

Now is there any security issue with this? Is it not as safe as FTP is? I mean, FTP is not the safest way to connect either, but I want to be able to connect w/out any software.

Is there any other solution you guys can think of?

having samba internet facing is never ever fun or advisable. Running it via an SSL tunnel makes it infinitely more secure of course. you can easily set up a tunnel via an SSH client like puTTY and then just map the drive as if it were running on your own windows system.

Leaving yourself open on the net is a no no. Your best bet would be ssh, I know you said no software but without it that leaves you vulnerable to many attacks. If you decide to go with Samba then make sure your passwords are very strong and leave nothing unguarded.

But isn't Samba just as unsafe as FTP is? Unfortunately I do not know how either of them exactly work, from the technical side.

If I have to conclude that it is not recommended to run Samba on the Internet at all, I'll have to do it with ssh. I'm pretty new to the entire network-thing, but I am definately willing to learn ;-) I'll google, but do you happen to have any useful links about setting up the tunnel? Anything I have to do on the server-side?

And, is there is ANY possible alternative to Samba you can think of?

i think you're missing what we're saying.

have an ssh server facing the internet. use a client like puTTY to create an SSH tunnel from your system to the server. then use samba all you want, as it will encrypted through the ssh tunnel. all the config is done client side really, assuming that both ssh and samba are functioning correctly.

http://www.google.co.uk/search?q=puTTY+ssh+tunnel

Ooh ok, now I know what you're trying to say. I thought the ssh-solution wouldn't use Samba.
Thanks guys.