Community discussions

MikroTik App
 
raminmalek
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Sun Nov 02, 2008 5:51 pm

why mikroitk Donot Cross File sharing traffic

Mon May 21, 2018 12:58 pm

On layer 3 windows file sharing used port tcp 445 i accept this port file one rule tcp src one rule dst port

But until \\IP address no access to file server

Please help me

I use router OS version 6.40.8 (Bugfix only)
 
tholderbaum
newbie
Posts: 38
Joined: Thu Jan 23, 2014 3:34 am
Location: Tampa, Florida
Contact:

Re: why mikroitk Donot Cross File sharing traffic

Mon May 21, 2018 9:14 pm

It is difficult to understand what you are trying to accomplish. I assume you are trying to open TCP/445 from the outside through the firewall. If so then it is a 2 step process:

Step one, you need to define the dstnat rule:

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=publicIP dst-port=445 \
protocol=tcp to-addresses=Internal IP

Step two: Add a firewall rule to accept traffic:

/ip firewall filter
add action=accept chain=forward dst-address=\
internalIP dst-port=445 protocol=tcp
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: why mikroitk Donot Cross File sharing traffic

Mon May 21, 2018 9:38 pm

...step three, move the rule added in Step 2 to a proper position in the list of rules, because rule order matters.
 
raminmalek
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Sun Nov 02, 2008 5:51 pm

Re: why mikroitk Donot Cross File sharing traffic

Mon May 21, 2018 10:02 pm

Traffic On my router is Forward To other hop (My router Forwarded Traffic To other Routers )

Donnot terminate Samba traffic on my royter That i write DST nat or other Rule


My question is My router donnot Forward File sharing traffic To other Hops
 
User avatar
CZFan
Forum Guru
Forum Guru
Posts: 2098
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Krugersdorp (Home town of Brad Binder)
Contact:

Re: why mikroitk Donot Cross File sharing traffic

Mon May 21, 2018 10:09 pm

Are you sure it is your router, not maybe firewall on server doing fie sharing blocking traffic coming from outside its local subnet?
 
User avatar
docmarius
Forum Guru
Forum Guru
Posts: 1222
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: why mikroitk Donot Cross File sharing traffic

Mon May 21, 2018 10:28 pm

If you have different subnets for your computers, browsing via SMB is not possible across those subnets, because broadcasts packets are not forwarded.
To achieve this, you need a WINS server and register all clients to it.
 
networkfudge
Trainer
Trainer
Posts: 136
Joined: Mon May 20, 2013 2:47 pm

Re: why mikroitk Donot Cross File sharing traffic

Tue May 22, 2018 3:42 am

No need for the forward accept rule.
It is difficult to understand what you are trying to accomplish. I assume you are trying to open TCP/445 from the outside through the firewall. If so then it is a 2 step process:

Step one, you need to define the dstnat rule:

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=publicIP dst-port=445 \
protocol=tcp to-addresses=Internal IP

Step two: Add a firewall rule to accept traffic:

/ip firewall filter
add action=accept chain=forward dst-address=\
internalIP dst-port=445 protocol=tcp
 
raminmalek
Member Candidate
Member Candidate
Topic Author
Posts: 156
Joined: Sun Nov 02, 2008 5:51 pm

Re: why mikroitk Donot Cross File sharing traffic

Tue May 22, 2018 11:11 am

File sharing Port 137 139 138 Layer 2 Netbios Protocol

445 Used Layer 3 and Forwared Between Routers

Who is online

Users browsing this forum: BatsirayiM, stefanau and 89 guests