2 ms·
I assume you don't expose the Samba to the internet? I'm still wondering if there's a reasonable way to do this (side-channel authentication/"port knocking"?).
by solarkraft 4y ago
I assume you don't expose the Samba to the internet? I'm still wondering if there's a reasonable way to do this (side-channel authentication/"port knocking"?).
- e12e 4y agoWireguard / tailscale or similar vpn should be fine? I've toyed with tailscale and ZeroTierOne - both should work fine with Bonjour/zeroconf if you need it - and handle routing (using lan when devices are on same net, routing over the internet when not). There's also Nebula from slack (but I've not tried it). Would love to see tailscale work with kernel wireguard clients (for better performance) - AFAIK today you'll have to pick one: easy setup with smart routing (ZeroTierOne / nebula / tailscale) - or - best in class performance with kernel space wireguard.
- Ralo 4y agoI don't expose samba no, but at one point I did run openvpn access. I set the client config for the VPN to only forward 192.168.x.x through the vpn, but not all other traffic. So if I go to a coffee shop, my windows laptop would act entirely like it was still on my lan and my mounted network drive would fully connect as normal. I removed that service since it was kind of clunky and always had connection issues. Perhaps I should try it again.