How to make CIFS/SMB shares accessible from internet without Active Directory?

[bahador_b_92]

Hi,

Is there any chance that I might be able to make my CIFS/SMB sahres accessible as a network drive not only on local computers (Windows 10) connected to my home router but also on the computers (Windoes 10) that try to access the shares over internet without setting up Active Directory?

I have CIFS Authentication currently on "Local User" on my NAS and guest account is turned off in the shares. I decided to turn CIFS/SMB off and enable Samba AD based on this tutorial viewtopic.php?f=98&t=9056 as a solution, but after the configuration, I wasn't able to add the domain on my Windows 10 computer as it gave me an erro that it couldn't establish a connection with Active Directory Server (since it doesn't exist!), which puts me back in the first point to ask if there is a workaround without using Active Directory.

Thanks for your answers...

[raulfg3]

that try to access the shares from internet

using VPN?

[bahador_b_92]

No. Normal internet. But does it matter?

[raulfg3]

Is there any chance that I might be able to make my CIFS/SMB sahres accessible as a network drive not only on local computers (Windows 10) connected to my home router but also on the computers (Windoes 10) that try to access the shares over internet without setting up Active Directory?

try this trick: https://www.simonholywell.com/post/2009 ... sh-tunnel/

[bahador_b_92]

didn't work... I could open the \\10.0.0.1 , but it was a empty directory and I couldn't do anything with it...
If it would help, I am on standalone CIFS/SMB again (Local User) and not on Samba AD anymore. I also have ZFS Datasets as my shares and no UFS.

[b0ssman]

caution is better here.

if the service is reachable from the internet you will get a lot of brute force attacks on the device.
you should also be on a mailing list for security vulnerabilities, so that if one is discovered you can take immediate actions.

but my rule of thumb here is that if you dont know how to set ip up, it should not be reachable from the internet.