Question about ports

[VilhoNator]

Hi, I am going to build myself FreeNas system and I have a question related to ports.

I have OpnSense firewall and I need to know all necessary ports which FreeNas uses for windows clients because my internal networks are isolated, so I can't just plug it in and connect directly without adding firewall rules.

Simply, I tend to keep my freeNas open only to devices which IPs are listed on allowed list and block internet completely on FreeNas

 

[Chris Moore]

Simply, I tend to keep my freeNas open only to devices which IPs are listed on allowed list and block internet completely on FreeNas

wow. You want the computers accessing the NAS to be isolated from the NAS by a firewall and only open the needed ports between the computers and the NAS.

Are you using SMB on the NAS for sharing data to the Windows workstations? How about SSH, so you can access the NAS for management?

 

[Chris Moore]

Quoting:

SMB was originally designed by Barry Feigenbaum at IBM in 1983 with the aim of turning DOS INT 21h local file access into a networked file system and was originally designed to run on top of NetBIOS over TCP/IP (NBT) using IP port 139 and UDP ports 137 and 138. Software applications that run on a NetBIOS network locate and identify each other via their NetBIOS names.

Also:

By Microsoft Windows 2000, Microsoft had changed SMB to operate over port 445. SMB still uses port 445.

Source: https://www.upguard.com/blog/smb-port

If the NAS doesn't have access to the internet, you will need to manually correct the time as it will drift and you will need to do updates by downloading the tar file from here:

https://download.freenas.org/

 

[VilhoNator]

wow. You want the computers accessing the NAS to be isolated from the NAS by a firewall and only open the needed ports between the computers and the NAS.

Are you using SMB on the NAS for sharing data to the Windows workstations? How about SSH, so you can access the NAS for management?

For console I have serial cable and interface avialable, if there's no console connection support, no biggie as I am going to setup workstation within same network for webgui anyway, and what comes to updates and time synchronization, manually connect NAS to the internet when needed.

So I assume I need to open SMB for SAMBA and that should allow file transfers to NAS on windows clients?