Ransomware and Mapped Drive

[Gnome]

It is interesting how you guys try to fix this problem.

A network share that allows anyone to modify all contents is the problem here.
Not the fact that a Virus email was missed or that a user opened it.

That will happen, it is a fact of life. You should fight it with appropriate storage setups.

 

[initroot]

It is interesting how you guys try to fix this problem.

A network share that allows anyone to modify all contents is the problem here.
Not the fact that a Virus email was missed or that a user opened it.

That will happen, it is a fact of life. You should fight it with appropriate storage setups.

Some software require you to use network shares, at the end of the day you need to work with what you've got
in your environment

 

[FoXtroT]

Yep. Snapshots can only be managed at an OS level.
So long as you make regular snapshots you are safe.

Since snapshots in FreeNAS/ZFS are free, you can make them pretty often (eg. every 30 minutes).
Personally I would make one every 30 minutes and then delete them after a day (and replace for a single snapshot for that day).
This way you have backups every day and for the given day, every 30 minutes.

ZFS makes a copy when you change something (called copy on write). Because of this Snapshots are pretty cheap (it only tracks the changes between every snapshot).
But if you have a lot of changes it can become pretty expensive space wise.

So you do need to experiment a bit with the best solution for you.


You should really do your research.
I currently use AWS S3 because FreeNAS supports it and it is actually pretty cheap if you upload the files with Infrequent Access (I setup a rule to move it to Glacier which costs $0.007 per gibibyte)

Not sure if it is the cheapest but I have lots of experience setting it up to reduce costs.
My costs with Amazon is still only like $2 every month, to me that is nothing.

Thanks for the info. Didn't realise S3 supported FreeNAS, thought it was only Crashplan that worked (but next to impossible to set up).

I will definitely investigate it, although I may wait until FreeNAS 10 is released as it will use Docker instead of the current plugin system so from what I gather it will offer far more applications than the current system and I'm sure AWS S3 is supported.