Samba allow SMB1 protocol for a single IP only

I have an old network printer in my Linux network supporting SMB1 only. How can I limit the potential security issue to this IP only? Enabling the SMB1 protocol in the [global] section of smb.conf is working as expected but is not what I want. Is there any way to limit the SMB1 version to a single IP address within the smb.conf or is there any better mechanism to archive this?


SMB1 and SMB3 use same network ports and it is impossible to allow SMB1 only to specific IP with either smb.conf or TCP firewall.

You need to run separate smb instance as NiKiZe mentioned. Another approach would be to look at “Application” layer firewalls, which may distinguish SMB1 and SMB3.