4
1
So I have a relatively simple Setup for a 5-people Company I am currently working on. This Setup includes:
- 1 Server
- 1 Router
- 3+ "Clients"
I want to open a Windows Network share on the Server, to be accessed by the Clients. The SMB protocol that I configured uses Port 445 at some Point.
Unfortunately the consumer electronics Router I work with blocks port 445 and 139 for security considerations (netbios attacks), without any option to disable the blocking.
I called the router vendor's support and the plan now is to manually open some ports for forwarding the traffic necessary for SMB correctly.
Now I tried to Forward incoming port 445 connections to the local network, but unfortunately the connection is still dead.
What ports do I need to open for the connection to the Network share to work correctly?
Vogel612
Posted 2015-09-18T12:48:39.517
Reputation: 452
2where in your network is your router? SMB cannot be effectively opened to the outside world (the clients wouldn't work, its not a port-based networking issue, but the way the protocol functions). The ports are
UDP\137-138andTCP\137,139,445. Make sureNetBIOS over TCPis explicitly specified, and failing that, a WINS server may be helpful, but only do this if the router is in teh middle of your network. don't try to expose SMB over the internet. it just won't work. use an VPN or use web-safe technologies like SFTP\FTPS for remote file access. – Frank Thomas – 2015-09-18T13:01:34.7671"Don't try to expose SMB over the Internet" ... okay cancel that then. This is exactly what I am trying to do right now. I think I should really go for a SFTP-Based solution then. Thanks for the Swift Response :) – Vogel612 – 2015-09-18T13:04:44.267
@Vogel612 I think Frank cleared this up very well as SMB over WAN is not recommended. To help more though what are you trying to achieve rather than 'accessed by clients'? – CharlesH – 2015-09-18T13:14:43.103
I want to expose a Directory to the users on their Client machine, where they can collaborate on Office-documents required for work. The ideal case would be to enable this to happen without any further necessity to interact with the Device, so an automatically connecting Network share was my first idea. – Vogel612 – 2015-09-18T13:16:19.217