I have a Drobo 5N NAS where I keep backups.
I couldn't get to it one day and found out that Windows 10 went to SMB v2.0 (if I check SMB v1.0 I can see and use the drive). I also found out that there are some security risks in using SMB v1.0.
My router doesn't support SMB v1.0 and there isn't a firmware/software available. There is DD-WRT, I was thinking about putting that on the router.
Thoughts?
Windows 10 pro may have SMB1.0 turned off by default, but Windows 10 Home 1909 seems to have it turned on by default (based on a completely clean install I did a couple of days ago).
I understand from posts here that security risks of SMB1.0 on a home network are relatively low & I am using SMB1.0 on my home network.
Hi there
DD-WRT is useful for all sorts of things but this isn't a case for using it here.
As others have said SMB1 isn't really an issue on a Home network --in any case it's not the ROUTER that worries about SMB1 --- you might though on the NAS box (I tend not to like proprietary NAS systems - I find using an old machine and running it as a Linux server fruntions much more flexibly) - that you can see if it has SAMBA running and if it does you can change the max protocol level parameter to smb2/3 or whatever windows is on now.
Cheers
jimbo
I was looking at DD-WRT because it supports SMB 1,2, and 3 (I believe).
I need to look into v1.0. Is it only corporate networks that have a security issue? What if I try to access my NAS from my phone or a laptop over the internet, wouldn't SMB v1.0 be bad to use?
The NAS box uses 2.0 (there is an option to disable 1.0)
Hi there
Over a phone -- I've no idea but there's usually a lot of security you can set within most decent routers such as only allowing access via devices / applications etc from outside (use the routers firewall and port settings) so I wouldn't really worry about that particular issue. You aren't running a BANK etc etc.
Over the Internet the use of putty and SSL should make connections secure enough, also check router logs every so often.
Another idea is to create a VPN (openvpn or similar) but that's getting into serious stuff.
If you are using your phone just to transfer the odd file I wouldn't get paranoid about this stuff --in any case the phone data itself is encrypted so what a "casual" hacker would get is just zilch assuming they logged on quick enough to your connection. I'd avoid though doing basic file transfers in a public wifi cafe as all the data here will then be via the (usually unencrypted) wifi access provided by the cafe etc . Watching videos etc is fine -- who cares if that stuff can be seen by a determined hacker !!! (unless your videos are more of the "un-mentionable" kind. !!!
Cheers
jimbo
Your router has no affect on the SMB capabilities of your NAS. If the NAS only supports SMB v1, upgrading the router is not going to change that.
According to this:
Frequently Asked Questions: Drobo 5N2
The 5N supports SMBv2. Again, the router between the NAS and the computer makes no difference regarding which SMB version can be used, though. Unless the router has a USB port for sharing a flash drive or hard drive, the router will have no SMB spec at all. And if it does have a USB port, the SMB spec for the router will only apply to the drive connected to it, not any other devices connected via the network.
Quote