Unraid OS 6.9.2 Now Available

Bug Fixes and Minor Improvements

Failed Login Restrictions

For webGUI login, you now get 3 login attempts per IP address before a 15-minute cool-off is enforced. Further, the timestamp of the last three failed login attempts per IP address are stored in files located in /var/log/pwfail/<ip-address>.

Note: this only applies to webGUI login, not ssh or telnet.

Driver Updates

We updated the Nvidia vendor GPU driver to version 465.19.01. Use this handy plugin by Community Developer @ich777 to facilitate installing the correct driver.

Future Changes

In this release, we included some code to further limit brute-force login attempts; however, fundamental changes to certain default settings will be made starting with the 6.10 release.

Unraid OS has come a long way since it was originally conceived as a simple home NAS on a trusted LAN. It used to be that all protocols/shares/etc were by default "open" or "enabled" or "public" and if someone was interested in locking things down they would go do so on a case-by-case basis. In addition, it wasn't hard to tell users what to do because there weren't that many things that had to be done.

Let's call this approach convenience over security.

Now, we are a more sophisticated NAS, application, and VM platform. I think it's obvious we need to take the opposite approach: security over convenience. What we will do is lock everything down by default, and then instruct users how to unlock things.

Examples:

• Force users to define a root password upon first webGUI access.
• Make all shares not exported by default.
• Disable SMBv1, ssh, telnet, FTP, NFS by default (some are already disabled by default).
• Provide UI for ssh that lets them upload a public key and checkbox to enable keyboard password authentication.

We have already begun the 6.10 cycle and should have a -beta1 available soon (early next week?).

Thank you to all Moderators, Community Developers, and Community Members for reporting bugs, providing information, and posting workarounds.

-Tom Mortensen

CEO and Founder of Lime Technology 

Upgrade Instructions

• First create a backup of your USB flash boot device: Main/Flash/Flash Backup
• If you are running any 6.4 or later release, click 'Check for Updates' on the Tools/Update OS page.
• If you are running a pre-6.4 release, click 'Check for Updates' on the Plugins page.
• If the above doesn't work, navigate to Plugins/Install Plugin, select/copy/paste this plugin URL and click Install:https://s3.amazonaws.com/dnld.lime-technology.com/stable/unRAIDServer.plg

Bugs Reports

If you discover a bug or other issue in this release, please open a Stable Releases Bug Report.