Sachin Prabhu wrote:
The following advisory was released by US-CERT. https://www.us-cert.gov/ncas/current-activity/2017/01/16/SMB-Security-B est-Practices
Interesting since the KB articles they point out only tell how to disable SMB SMB2 or SMB3, but not why you would do so. Note, I have had to use SMB(1) on Windows7SP1 at times when I couldn't get SMB2 to work. Could the US-CERT people explain what the risk is in using SMB1 on a closed (not exposed to the internet) network? FWIW, I am running SMB2 now... Sure wish I knew how to optimize it, as I have gotten 400-600MB/s in past testing (don't know what SMB level it was), but am now only getting ~ 200MB/s on SMB2. SMB1 was in the low 100's for throughput. (between Win7SP1 client and Samba-on-linux server). -- To unsubscribe from this list: send the line "unsubscribe linux-cifs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
