3 ms·
In the home / office equipment SMB is disabled by default, and there are firewall rules blocking all incoming connections from WAN. Someone over at a MikroTik c
by carlhjerpe 8y ago
In the home / office equipment SMB is disabled by default, and there are firewall rules blocking all incoming connections from WAN. Someone over at a MikroTik channel said "if you run SMB on your router and you've got it accessible to the world you deserve to be hacked"
I can't say i disagree.
The recent bug about being able to download the user database was less cool though. But it was patches very fast after it was discovered.
Then again the above bug is only exploitable if you allow incoming connections from WAN on the management port, which isn't good practice (but i and many other people do it anyways because it's simple).
- fencepost 8y agoWe used to allow remote connections to management, but for probably 2-3 years it's been trusted networks only. Same for rdp, and the last customer with an in house mail server should be off it in 2-3 months. These days a blank non responsive void is the only thing that makes sense for an office.