Jump to content

Is SMB 1 secure enough to use for a home server?

Zecr

I am wondering if it is worth it to enable SMBv1 despite the security risks so that I can use an old router as a NAS. Personal home use only. 

Link to comment
Share on other sites

Link to post
Share on other sites

If you're not allowing it outside your network, yeah should be fine.

Link to comment
Share on other sites

Link to post
Share on other sites

5 minutes ago, Zecr said:

I am wondering if it is worth it to enable SMBv1 despite the security risks so that I can use an old router as a NAS. Personal home use only. 

The bigger issue will be how slow the router probably is at being a NAS.  Depending on your use case, it could be a pretty terrible experience.

 

Still if you already have it knocking around, it doesn't hurt to see if its sufficient for your needs.

Router:  Intel N100 (pfSense) WiFi6: Zyxel NWA210AX (1.7Gbit peak at 160Mhz)
WiFi5: Ubiquiti NanoHD OpenWRT (~500Mbit at 80Mhz) Switches: Netgear MS510TXUP, MS510TXPP, GS110EMX
ISPs: Zen Full Fibre 900 (~930Mbit down, 115Mbit up) + Three 5G (~800Mbit down, 115Mbit up)
Upgrading Laptop/Desktop CNVIo WiFi 5 cards to PCIe WiFi6e/7

Link to comment
Share on other sites

Link to post
Share on other sites

Id say no. There are a lot of remote execution flaws with smb1 that can allow malware to easily spread. 

 

Also if your router only supports smb1, something tells me its not supported, and probably should be updated anyways.

Link to comment
Share on other sites

Link to post
Share on other sites

1 hour ago, Electronics Wizardy said:

Id say no. There are a lot of remote execution flaws with smb1 that can allow malware to easily spread.

This.  SMB 1 and 2 are not good options too use. If your network has a connection to the internet these protocols make your whole network less secure.

Link to comment
Share on other sites

Link to post
Share on other sites

On 5/12/2020 at 6:38 PM, fuzz0r said:

If you're not allowing it outside your network, yeah should be fine.

You should never allow SMB/NFS/etc...outside of your network anyway.....

If you need remote access, you should be using a VPN or some sort of "cloud" service

Spoiler

Desktop: Ryzen9 5950X | ASUS ROG Crosshair VIII Hero (Wifi) | EVGA RTX 3080Ti FTW3 | 32GB (2x16GB) Corsair Dominator Platinum RGB Pro 3600Mhz | EKWB EK-AIO 360D-RGB | EKWB EK-Vardar RGB Fans | 1TB Samsung 980 Pro, 4TB Samsung 980 Pro | Corsair 5000D Airflow | Corsair HX850 Platinum PSU | Asus ROG 42" OLED PG42UQ + LG 32" 32GK850G Monitor | Roccat Vulcan TKL Pro Keyboard | Logitech G Pro X Superlight  | MicroLab Solo 7C Speakers | Audio-Technica ATH-M50xBT2 LE Headphones | TC-Helicon GoXLR | Audio-Technica AT2035 | LTT Desk Mat | XBOX-X Controller | Windows 11 Pro

 

Spoiler

Server: Fractal Design Define R6 | Ryzen 3950x | ASRock X570 Taichi | EVGA GTX1070 FTW | 64GB (4x16GB) Corsair Vengeance LPX 3000Mhz | Corsair RM850v2 PSU | Fractal S36 Triple AIO | 12 x 8TB HGST Ultrastar He10 (WD Whitelabel) | 500GB Aorus Gen4 NVMe | 2 x 2TB Samsung 970 Evo Plus NVMe | LSI 9211-8i HBA

 

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×