[Not Accepted] SMB Shares – default settings for Hosts Allow and Hosts Deny

Feature Requests
1

Problem/Justification
In our local network, I’ve put my son’s Win11 machine on an isolated VLAN because I don’t fully trust what gets installed on that machine. But I also want to backup that computer to a Samba share. I allow access between the different VLANs on port 445, but I would like to restrict what resources his computer can access even more.

There are settings for Hosts Allow and Hosts Deny for Samba shares. Adding the untrusted VLAN’s subnet to Hosts Deny would lock down his computer’s access further.

Making this change manually for existing shares doesn’t take to long. What concerns me is that I have to remember to do the change for all future shares added to my server.

So what I propose is an option to set defaults for Samba shares included here:

CleanShot 2025-08-09 at 11.30.09
CleanShot 2025-08-09 at 11.30.09461×1534 42 KB

Impact
Less risk of misconfigured Samba shares, increasing the data integrity of data stored on the TrueNAS server.

User Story
Beneficial to TrueNAS users that run their system in environments with differentiated trust levels.

2

Thank you for submitting this feature request. After keeping it open to gauge community interest, we’re closing it as it hasn’t received enough votes to prioritize for development.