Download Unraid OS 6.9.2

Version 6.9.2 of Unraid OS has been released. This operating system allows a server to be set up for tasks such as network attached storage, application server, and virtualization host. It is easy to set up and extremely flexible with regard to the hardware used and the size of the hard drives. Docker is used to add functionality and this apps are validated and maintained by an active community. There is a one-time purchase price that depends on the number of hard drives and SSDs used. Basic costs $59 and allows up to six devices, a Plus license costs $89 for up to twelve devices, and Pro is unlimited for $129. The release notes for version 6.9.2 look like this:

Failed Login Restrictions

For webGUI login, you now get 3 login attempts per IP address before a 15-minute cool-off is enforced. Further, the timestamp of the last three failed login attempts per IP address are stored in files located in /var/log/pwfail/.

Note: this only applies to webGUI login, not ssh or telnet.

Driver Updates

We updated the Nvidia vendor GPU driver to version 465.19.01. Use this handy plugin by Community Developer @ich777 to facilitate installing the correct driver.

Future Changes

In this release, we included some code to further limit brute-force login attempts; however, fundamental changes to certain default settings will be made starting with the 6.10 release.

Unraid OS has come a long way since it was originally conceived as a simple home NAS on a trusted LAN. It used to be that all protocols/shares/etc were by default “open” or “enabled” or “public” and if someone was interested in locking things down they would go do so on a case-by-case basis. In addition, it wasn’t hard to tell users what to do because there weren’t that many things that had to be done.

Let’s call this approach convenience over security.

Now, we are a more sophisticated NAS, application, and VM platform. I think it’s obvious we need to take the opposite approach: security over convenience. What we will do is lock everything down by default, and then instruct users how to unlock things.

:

• Force users to define a root password upon first webGUI access.
• Make all shares not exported by default.
• Disable SMBv1, ssh, telnet, FTP, NFS by default (some are already disabled by default).
• Provide UI for ssh that lets them upload a public key and checkbox to enable keyboard password authentication.

We have already begun the 6.10 cycle and should have a -beta1 available soon (early next week?).

Unraid 6.9.2 Change Log

Check out the Documentation for the full release Change Log.