-
Leave encrypted disks unmounted and manually mount with passphrase (from windows client?)
Hello Aim: I have an encrypted disk and an unencrypted disk in my array. I want the unencrypted disk (or user shares on it) to be available to access in windows (mounted), while the encrypted disk (or user shares on it) to be only accessible once I’ve entered the decryption passphrase (unmounted until passphrase entered). Questions: At the moment when I start the array, the encrypted disk is unlocked (and it is not asking me to enter a passphrase) and all disks are mounted. How can I change that behavior so that only the unencrypted disk is mounted? (I want to be able to access the unencrypted disk while leaving the encrypted disk locked). Why is it not asking for me to enter the passphrase to start the array including the encrypted disk? I assumed that I would need to enter the passphrase each time I want to unlock it? When I want to access the encrypted disk, I want to be able to manually mount it by entering the passphrase. Can that be done in windows without having to access the webgui? Ideally I'd like to be able to power on the unraid server and have the unencrypted disks automounted and have them mapped in windows so they are immediately accessible. Also have the encrypted disks mapped in windows, but when I try to access them it's asks me for the passphrase which then decrypts and mounts the drive and allows me access. Any help is much appreciated. Thanks
-
Securing and Optimizing SMB shares
It just dawned on me that the NIC in my Linux client is also an i226 intel. OST results are 2.5g down and 2.0G up. So I dont think it's related solely to the realtek nic. Got to be a setting somewhere. Or it couldn't be related to an old GPU I have installed in the Unraid server could it?
-
Securing and Optimizing SMB shares
There was a suggestion in the linked reddit thread that it may help fix bandwidth in both directions. Thought it was worth a shot. Also changed MTU to 9000 and Jumbo Frames in windows to 9014, disabled interrupt moderation but maxing out at 1.85G up. Oh well, will keep playing / searching. Thanks all, for your help. If I get any joy I will post back.
-
Securing and Optimizing SMB shares
So downloaded the latest driver for my motherboard RTL8125B Nic from realtek website and installed on windows pc. Retested - slight improvement at 1.85G up. Found THIS thread, suggested to update Unraid (I was on 7 but now on 7.01). Also installed the Realtek RTL8125(B) plugin in Unraid. Rebooted both server and PC. Ran OST again. Results: Open Speed Test Do you think it's worth spending out ~£35 to buy an i226 intel NIC to put in PCIe slot in motherboard to avoid using the Realtek motherboard NIC? do you think that would give me the full bandwidth in both directions, or is this more likely a settings configuration issue? what about stuff like MTU / jumbo frames, interrupt moderation and other stuff mentioned in THIS guide?
-
Securing and Optimizing SMB shares
Ok thanks. How do I check the NIC driver that's installed on the unraid server, find the best version to use instead, and how do I update it? sorry, I'm used to doing everything in a windows environment. Can I get it to scan for newer drivers and auto-update or would I need to find a NIC model number and go online to search for the newest version? And once obtained, how to install it? Thanks
-
Securing and Optimizing SMB shares
Ok got access by going to sharing tab of network connections and selecting the checkbox and selecting a connection from the dropdown box. I've since ran the open speed test docker on unraid and connected from the PC browser to run the test. Now only getting 1.6G up and down when using direct cable, whereas was getting 2.5G down and 1.7G up when using the switch!? Any idea what that's all about?
-
Securing and Optimizing SMB shares
Thanks, Use SSL/TLS is set to No. Is that what I'd want for direct connection? I set the static IP in the unraid network.cfg file the same IP as what the server usually gets assigned via DHCP that I use to login normally (and that is the IP that is saved under windows credentials (which has the username and password that I set up in Unraid). I had set both windows and unraid to have static IP's in the same subnet, so unless the SSL/TLS should be set to something other than NO, I'm still not sure what I'm missing.
-
Securing and Optimizing SMB shares
Hi Guys, Regarding the LAN speed, I'm trying to connect my windows client directly to the unraid server to test the up and down speed without the switch to eliminate that as being the issue, but I can't connect. I've given unraid a static IP in the network.cfg file and set DHCP to no. Connected PC nic to unraid server nic with direct cable (tried both standard and crossover cables) Disabled firewall Set static IP in PC adapter settings in the same subnet as unraid static IP Set PC sharing settings as follows: pc sharing settings Adapter keeps saying "unidentified network" and cannot access Unraid GUI through the browser - "unable to connect". Probably being stupid or missing something obvious, any ideas? Thanks
-
Securing and Optimizing SMB shares
If my shares are all set to private, should I have a windows credential entry for the server?
-
Securing and Optimizing SMB shares
Thanks @Frank1940 I will check out the PDF's /post this evening. I assume this is not the same as setting all shares to private? I thought it said when I did this "guests have no access" or something along those lines. It was mainly just a query to ask if there was any things that were considered as good practice to add in there to improve security, or if leaving it blank is fine for the average joe.
-
Securing and Optimizing SMB shares
NIC in Unraid server is this: https://www.aliexpress.com/item/1005007539867951.html (Intel i226) Switch is this: https://www.brostrend.com/pages/s3-specification (not sure how to tell what NIC's are from specs) Motherboard in PC: https://www.msi.com/Motherboard/MAG-B650M-MORTAR-WIFI/Specification (Realtek® RTL8125B 2.5Gbps LAN)
-
Securing and Optimizing SMB shares
Ok thanks. What would be the best way to eliminate things? I don't think it's the cables - they are brand new cat 8 (yes I've already been told don't need cat 8 lol) and the switch is also brand new 2.5gb nics - may need to see if there's a firmware update available for it though. I've installed all the latest drivers for my motherboard. How do I check if drivers need updating for the other nics? Do you have any views on the guide that I've linked and the SMB extra configuartion question? Thanks a lot
-
Securing and Optimizing SMB shares
Hi All, Q1. Is there anything you would recommend to add into the SMB extra configuration settings field to increase security of SMB shares? Is there any resources that I can refer to for this? Q2. I found THIS guide on optimizing SMB shares in Unraid. Was keen to get some feedback on if this is still relevant and the advice in the guide is worth following / testing. At the moment when doing an open speed test / iperf3 test between server and client, I’m getting almost 2.5G download (2.5GB nics) but only about 1.7G upload and I’m not sure why UL is not also reaching 2.5G. The guide suggests that disks shares perform faster (overhead of FUSE) but I believe the general advice on this forum is to disable disk shares and not to use them? I'm not a very technical Unraid user so If you know of or can recommend any other guides that maybe useful regarding these subjects, that'd be helpful. Many Thanks
-
Share is outside the list of designated disks, settings all wonky
Thanks for the tips guys! I will use only user shares, Dynamix file manager and high water allocation method going forwards.
-
Share is outside the list of designated disks, settings all wonky
Sorry, what I meant to say was: with the allocation method set to "Most Free" after clicking the move button I assumed this would move the data.... Looks like I need to use "split only top level directory" in split level settings in order for it to work. Anyway, Once I've got all my data where I want it on the disks, I'll set it to High water going forwards. Just to confirm, if I want to manually move data, I can disable user shares and enable disk shares, and then move my data using MC where I want it, and then re-enable User shares. Any data then added to the user share afterwards will work based on the user share settings?
Dominoes0522
Members
-
Joined
-
Last visited