Owner question: host tools, block SMB and printers to the internet computer-wide? #29

This is about the host-tools design (PR #26, §3.5).

Question: block SMB (file sharing) and printers to the internet for the whole computer when host tools are installed?

Recommended: yes. It closes a way for the agent to send files out through Windows file sharing. The System process and the print spooler get no connection outside your home network and tailnet.

Cost: your NAS, shares and printers at home keep working. A share or printer on an internet address stops working, for every account on that computer. SMB over QUIC is turned off. Host tools stay off until this block holds.

Other choice: no computer-wide block; host tools then stay off unless you accept this gap by name.

Until you answer, the doc is written with "yes".

🤖 Generated with Claude Code