Thanks for your reply. Could you reopen this ticket then please? The original description still applies: i.e. port 139 is still open. Thanks.
Andrew Walker
May 26, 2021 at 12:09 AM
nmbd and netbios-over-tcp are two separate things. I suppose I could disable NBT when we're SMB2+.
Sean McBride
May 25, 2021 at 10:16 PM
friendly ping...
Is it preferable that I create a new ticket?
Sean McBride
May 14, 2021 at 9:55 PM
So I just portscaned my TrueNAS server, and port 139 is closed. Now that I've been running 12 for a while, I'm cleaning through my own docs, and I just removed these aux parameters that I had set ages ago:
disable netbios = yes smb ports = 445
then I portscanned myself again, and now port 139 is open.
Yet Network > Global Configuration has NetBIOS-NS off.
I recently discovered on the forum that I could set samba aux paramaters as follows to disable NetBIOS:
disable netbios = yes
smb ports = 445
If I correctly understand https://en.wikipedia.org/wiki/Server_Message_Block#Features then it seems that NetBIOS support is not needed if all computers are running Windows Vista or newer.
Disabling NetBIOS reduces the attack surface of one's FreeNAS server, because an entire port is closed.
Therefore, it would be nice to have a GUI method to disable NetBIOS. (I'd also argue it should be disabled by default.)