SMB 1.0 and my Netgear router (with NAS hardware)  

Page 1 of 2 12 LastLast

  1. Posts : 72
    Windows 10
       #1

    SMB 1.0 and my Netgear router (with NAS hardware)


    I have a Drobo 5N NAS where I keep backups.
    I couldn't get to it one day and found out that Windows 10 went to SMB v2.0 (if I check SMB v1.0 I can see and use the drive). I also found out that there are some security risks in using SMB v1.0.

    My router doesn't support SMB v1.0 and there isn't a firmware/software available. There is DD-WRT, I was thinking about putting that on the router.

    Thoughts?
      My Computer


  2. rqt
    Posts : 130
    Windows 10 mainly 64 bit
       #2

    Windows 10 pro may have SMB1.0 turned off by default, but Windows 10 Home 1909 seems to have it turned on by default (based on a completely clean install I did a couple of days ago).

    I understand from posts here that security risks of SMB1.0 on a home network are relatively low & I am using SMB1.0 on my home network.
      My Computer


  3. Posts : 11,247
    Windows / Linux : Arch Linux
       #3

    HarryD said:
    I have a Drobo 5N NAS where I keep backups.
    I couldn't get to it one day and found out that Windows 10 went to SMB v2.0 (if I check SMB v1.0 I can see and use the drive). I also found out that there are some security risks in using SMB v1.0.

    My router doesn't support SMB v1.0 and there isn't a firmware/software available. There is DD-WRT, I was thinking about putting that on the router.

    Thoughts?
    Hi there
    DD-WRT is useful for all sorts of things but this isn't a case for using it here.

    As others have said SMB1 isn't really an issue on a Home network --in any case it's not the ROUTER that worries about SMB1 --- you might though on the NAS box (I tend not to like proprietary NAS systems - I find using an old machine and running it as a Linux server fruntions much more flexibly) - that you can see if it has SAMBA running and if it does you can change the max protocol level parameter to smb2/3 or whatever windows is on now.

    Cheers
    jimbo
      My Computer


  4. Posts : 72
    Windows 10
    Thread Starter
       #4

    jimbo45 said:
    Hi there
    DD-WRT is useful for all sorts of things but this isn't a case for using it here.


    As others have said SMB1 isn't really an issue on a Home network --in any case it's not the ROUTER that worries about SMB1 --- you might though on the NAS box (I tend not to like proprietary NAS systems - I find using an old machine and running it as a Linux server fruntions much more flexibly) - that you can see if it has SAMBA running and if it does you can change the max protocol level parameter to smb2/3 or whatever windows is on now.

    Cheers
    jimbo
    I was looking at DD-WRT because it supports SMB 1,2, and 3 (I believe).
    I need to look into v1.0. Is it only corporate networks that have a security issue? What if I try to access my NAS from my phone or a laptop over the internet, wouldn't SMB v1.0 be bad to use?

    The NAS box uses 2.0 (there is an option to disable 1.0)
      My Computer


  5. Posts : 11,247
    Windows / Linux : Arch Linux
       #5

    HarryD said:
    I was looking at DD-WRT because it supports SMB 1,2, and 3 (I believe).
    I need to look into v1.0. Is it only corporate networks that have a security issue? What if I try to access my NAS from my phone or a laptop over the internet, wouldn't SMB v1.0 be bad to use?

    The NAS box uses 2.0 (there is an option to disable 1.0)
    Hi there

    Over a phone -- I've no idea but there's usually a lot of security you can set within most decent routers such as only allowing access via devices / applications etc from outside (use the routers firewall and port settings) so I wouldn't really worry about that particular issue. You aren't running a BANK etc etc.

    Over the Internet the use of putty and SSL should make connections secure enough, also check router logs every so often.

    Another idea is to create a VPN (openvpn or similar) but that's getting into serious stuff.

    If you are using your phone just to transfer the odd file I wouldn't get paranoid about this stuff --in any case the phone data itself is encrypted so what a "casual" hacker would get is just zilch assuming they logged on quick enough to your connection. I'd avoid though doing basic file transfers in a public wifi cafe as all the data here will then be via the (usually unencrypted) wifi access provided by the cafe etc . Watching videos etc is fine -- who cares if that stuff can be seen by a determined hacker !!! (unless your videos are more of the "un-mentionable" kind. !!!

    Cheers
    jimbo
      My Computer


  6. Posts : 72
    Windows 10
    Thread Starter
       #6

    Did a reinstall, did all updates, Windows 10 Home, 1909, found out SMB 1.0 is now on by default.

    - - - Updated - - -

    jimbo45 said:
    Hi there

    Over a phone -- I've no idea but there's usually a lot of security you can set within most decent routers such as only allowing access via devices / applications etc from outside (use the routers firewall and port settings) so I wouldn't really worry about that particular issue. You aren't running a BANK etc etc.

    Over the Internet the use of putty and SSL should make connections secure enough, also check router logs every so often.

    Another idea is to create a VPN (openvpn or similar) but that's getting into serious stuff.

    If you are using your phone just to transfer the odd file I wouldn't get paranoid about this stuff --in any case the phone data itself is encrypted so what a "casual" hacker would get is just zilch assuming they logged on quick enough to your connection. I'd avoid though doing basic file transfers in a public wifi cafe as all the data here will then be via the (usually unencrypted) wifi access provided by the cafe etc . Watching videos etc is fine -- who cares if that stuff can be seen by a determined hacker !!! (unless your videos are more of the "un-mentionable" kind. !!!

    Cheers
    jimbo
    the files would be mostly .pdf's and maybe a spreadsheet
      My Computer


  7. Posts : 28,377
    10 Home x64 (22H2) (10 Pro on 2nd pc)
       #7

    HarryD said:
    Thoughts?
    The risks of enabling SMB1 in Windows Features are relatively low on a home network, particularly if you only enable 'SMB 1.0/CIFS Client'. That's the only bit needed to be able to access a NAS that only has SMB1.
      My Computers


  8. Posts : 18,271
    Windows 11 Pro
       #8

    Your router has no affect on the SMB capabilities of your NAS. If the NAS only supports SMB v1, upgrading the router is not going to change that.
      My Computer


  9. Posts : 72
    Windows 10
    Thread Starter
       #9

    NavyLCDR said:
    Your router has no affect on the SMB capabilities of your NAS. If the NAS only supports SMB v1, upgrading the router is not going to change that.
    I've looked and I think that my NAS uses SMB 2. If I disable SMB1 (within Windows), I can't see my NAS.
    I'm using a Drobo 5N (there is an option to disable SMBv1 which is checked.
    Attached Thumbnails Attached Thumbnails SMB 1.0 and my Netgear router (with NAS hardware)-smbv1.png  
      My Computer


  10. Posts : 18,271
    Windows 11 Pro
       #10

    According to this:
    Frequently Asked Questions: Drobo 5N2

    The 5N supports SMBv2. Again, the router between the NAS and the computer makes no difference regarding which SMB version can be used, though. Unless the router has a USB port for sharing a flash drive or hard drive, the router will have no SMB spec at all. And if it does have a USB port, the SMB spec for the router will only apply to the drive connected to it, not any other devices connected via the network.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 14:16.
Find Us




Windows 10 Forums