Yep, it's only visible to your local network. I'd suggest changing the 'guest ok' line to 'no' though, if you're worried about people snooping through your stuff. You'll have to setup a login for the computers to login with if you do change that though. More on reddit.com

Okay, this is a config for a simple single server that's not a member of an AD domain and is doing it's own internal username/password verification. It's taken from my home server, but it should be relevant for your needs. Some of the entries should no longer be needed (TCP_NODELAY for example) however I'm a believer of "if it aint broke..." You'll want to modify the share sections for what your shares are, and also modify the security modes etc to something a bit more secure once you've confirmed it's working. Also don't forget to run "smbpasswd" for each user that you want authenticated access for... [global] workgroup = CORP netbios name = FILESERVER server string = Linux Samba File Server map to guest = Bad User null passwords = Yes guest account = guest wins support = Yes client NTLMv2 auth = Yes log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY IPTOS_LOWDELAY disable spools = Yes show add printer wizard = No preferred master = No domain master = No idmap uid = 15000-20000 idmap gid = 15000-20000 winbind use default domain = Yes dont descend = ./lost+found use sendfile = yes hide unreadable = yes hide files = /lost+found/ cache directory = /var/run/samba/locks/cache directory name cache size = 500 os level = 0 [Homes] comment = Home Directories read only = No hide files = /.*/lost+found/ browseable = No browsable = No [Fileshare] comment = A basic file share path = /srv/fileshare write list = user1, user2, user3, @group1, @group2 force create mode = 0666 force security mode = 0666 force directory mode = 0777 force directory security mode = 0777 guest ok = Yes hide special files = Yes hide files = /.*/lost+found/ dont descend = /lost+found More on reddit.com

Yeah, used it for years. Just make sure you're not opening the Samba ports to the world - I mean, those ports aren't open on my router firewall but I still restrict the Samba ports to 192.168.1.* anyway on the Ubuntu firewall and Samba still required user authentication. More on reddit.com

I got tired of fighting those little nuances and security. On my network if it needs Samba/cifs it's a full VM. Exception is a Plex LXC container i used someone's script to spin up as an experiment to see if it would work better than mine last year (my old one had a lot of instability issues with cgroups/igpu access).

More on reddit.com