yah, know as read-only???
I found this article on how to do it.. but was just hoping to avoid a lot of unix commands etc.
yah, know as read-only???
I found this article on how to do it.. but was just hoping to avoid a lot of unix commands etc.
Yes, first off those devices don't deliver 4 Gb of data..Just a thought... security wise that is...
If the user is on the Guest Network, that means there is a level of trust that isn't allowed by the primary SSID - are you sure you want to even consider this, as opposed to perhaps OneDrive or Dropbox?
this is not guest network.. this is a Guest account built-in to windows that allows you looking at files and shares without a password.. it's a winndows feature. Works fine on windows.. but here there's no ability to configure READ-ONLY (which is something you can do in windows and in samba.. if it was enabled some how? I'd prefer not to do this guy's router hack to do it.)If the user is on the Guest Network
What the heck does that have to do with Microsoft Client for Microsoft Networks/samba/File and Printer Sharing for Microsoft Networks?Well, again, it goes back to the trust issue... I'm not being paranoid, I'm just being practical/pragmatic..
I have a guest SSID running - and it's VLAN'ed straight out to the internet, and I have AP-isolation enabled, so guests get WiFi and Internet, but are totally isolated from my LAN, and from each other over the WLAN...
I work from home, and my work laptop is on that Guest SSID, as I don't trust them (anything inside their network) and they probably shouldn't trust me...
My guest SSID is WPA2 protected, btw... I don't use a captive portal...
What the heck does that have to do with Microsoft Client for Microsoft Networks/samba/File and Printer Sharing for Microsoft Networks?
Yah, I understand all that.. what I'm interested in again is a "Guest" network neighborhood account/client computer that is SERVED "read-only" that is served by a usb 3.0 connection ntfs hard drive from a asus router....Jeez... this popped up on my radar due to basic security concepts...
But I'll give it a try...
Comes down to TRUST - a Guest Network/SSID means you don't trust someone to access your network resources, period... if you are, well, you're doing it wrong from a security perspective...
User/Group/World - the world is everything, groups can define access to specific resources, and users can be added to groups, and properties are inherited up the access chain.
MS Workgroups/Homegroups - they all live within the private domain, and you should never, ever, never cross that line - either you trust the client, or you don't - and when you don't, either don't give them access to your WLAN at all, or sandbox them into the Guest WLAN, and that's that...
'nuff said?
sfx
Yah, I understand all that.. what I'm interested in again is a "Guest" network neighborhood account/client computer that is SERVED "read-only" that is served by a usb 3.0 connection ntfs hard drive from a asus router....
the share is public to the LAN it has nothing to do with a WANSecurity violation, IMHO... unless that share is public to the world, it's hard to segregate it any further... can't have world and not so much world in the same space - again, goes back to trust...
the share is public to the LAN it has nothing to do with a WAN
I'd rather just have the feature I know samba can do.. and if I can't get it.. I guess, I'll enable passwords..So don't worry about the guest network eh? Consider a Guest SSID is being world visable, ok?
Inside the LAN, going back to the share itself, you can define properties there - for most, one person should be owner with read/write, and then everyone else should be read only...
One can always make a general share with write only as a dropbox, and perhaps a public read-write - and this can be done on a folder/directory basis.
Nice thing about Samba, you have that ability
Guess the best way to describe this - know what your sharing, and who do you trust?
I'd rather just have the feature I know samba can do.. and if I can't get it.. I guess, I'll enable passwords..
nope, not really it's pretty stupid.. I'd share the drive via a windows machine.. but then I'd have to keep it on 24/7.. where as leaving the router on 24/7 is a better option..Fair enough - yep, I know it's a hassle, but it's a good kind of hassle, agree?
I found DDWRT's tab of NAS sharing has this feature so maybe developer can take a look at it?
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!