How to encrypt smb2 traffic?

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












I have set up a shared folder to my linux maschine . It runs over the samba server present in Linux . the only problem is that this protocol in not encrypted and I do not feel comfortable with that . Is there any way to encrypt the smb traffic ( without ssh tunnel or VPN server ) .







share|improve this question
















  • 1




    What protocol? Samba is capable of speaking several versions of the SMB/CIFS protocol. For starters, read the manual page for smb.conf and try setting smb encrypt = required.
    – AlexP
    Nov 12 '17 at 18:54














up vote
0
down vote

favorite












I have set up a shared folder to my linux maschine . It runs over the samba server present in Linux . the only problem is that this protocol in not encrypted and I do not feel comfortable with that . Is there any way to encrypt the smb traffic ( without ssh tunnel or VPN server ) .







share|improve this question
















  • 1




    What protocol? Samba is capable of speaking several versions of the SMB/CIFS protocol. For starters, read the manual page for smb.conf and try setting smb encrypt = required.
    – AlexP
    Nov 12 '17 at 18:54












up vote
0
down vote

favorite









up vote
0
down vote

favorite











I have set up a shared folder to my linux maschine . It runs over the samba server present in Linux . the only problem is that this protocol in not encrypted and I do not feel comfortable with that . Is there any way to encrypt the smb traffic ( without ssh tunnel or VPN server ) .







share|improve this question












I have set up a shared folder to my linux maschine . It runs over the samba server present in Linux . the only problem is that this protocol in not encrypted and I do not feel comfortable with that . Is there any way to encrypt the smb traffic ( without ssh tunnel or VPN server ) .









share|improve this question











share|improve this question




share|improve this question










asked Nov 12 '17 at 17:11









Richard R. Matthews

1116




1116







  • 1




    What protocol? Samba is capable of speaking several versions of the SMB/CIFS protocol. For starters, read the manual page for smb.conf and try setting smb encrypt = required.
    – AlexP
    Nov 12 '17 at 18:54












  • 1




    What protocol? Samba is capable of speaking several versions of the SMB/CIFS protocol. For starters, read the manual page for smb.conf and try setting smb encrypt = required.
    – AlexP
    Nov 12 '17 at 18:54







1




1




What protocol? Samba is capable of speaking several versions of the SMB/CIFS protocol. For starters, read the manual page for smb.conf and try setting smb encrypt = required.
– AlexP
Nov 12 '17 at 18:54




What protocol? Samba is capable of speaking several versions of the SMB/CIFS protocol. For starters, read the manual page for smb.conf and try setting smb encrypt = required.
– AlexP
Nov 12 '17 at 18:54










1 Answer
1






active

oldest

votes

















up vote
0
down vote













You cannot encrypt data if you're using the 2.XX family of SMB dialects. Encryption support was brought in from 3.XX. You can enable signing to see if your packets were tampered with, though.



So to get encryption working just change the dialect to SMB3+ and smb encrypt = required as @AlexP pointed out.






share|improve this answer




















    Your Answer







    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "106"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    convertImagesToLinks: false,
    noModals: false,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













     

    draft saved


    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f404079%2fhow-to-encrypt-smb2-traffic%23new-answer', 'question_page');

    );

    Post as a guest






























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    0
    down vote













    You cannot encrypt data if you're using the 2.XX family of SMB dialects. Encryption support was brought in from 3.XX. You can enable signing to see if your packets were tampered with, though.



    So to get encryption working just change the dialect to SMB3+ and smb encrypt = required as @AlexP pointed out.






    share|improve this answer
























      up vote
      0
      down vote













      You cannot encrypt data if you're using the 2.XX family of SMB dialects. Encryption support was brought in from 3.XX. You can enable signing to see if your packets were tampered with, though.



      So to get encryption working just change the dialect to SMB3+ and smb encrypt = required as @AlexP pointed out.






      share|improve this answer






















        up vote
        0
        down vote










        up vote
        0
        down vote









        You cannot encrypt data if you're using the 2.XX family of SMB dialects. Encryption support was brought in from 3.XX. You can enable signing to see if your packets were tampered with, though.



        So to get encryption working just change the dialect to SMB3+ and smb encrypt = required as @AlexP pointed out.






        share|improve this answer












        You cannot encrypt data if you're using the 2.XX family of SMB dialects. Encryption support was brought in from 3.XX. You can enable signing to see if your packets were tampered with, though.



        So to get encryption working just change the dialect to SMB3+ and smb encrypt = required as @AlexP pointed out.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Aug 6 at 12:39









        Sushant Mathur

        11




        11



























             

            draft saved


            draft discarded















































             


            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f404079%2fhow-to-encrypt-smb2-traffic%23new-answer', 'question_page');

            );

            Post as a guest













































































            Popular posts from this blog

            Peggy Mitchell

            Palaiologos

            The Forum (Inglewood, California)