Forwarding windows file sharing ports in DSL Routers

Collapse -

Your idea is incredibly stupid

by segin2005 · 11 years ago In reply to Forwarding windows file s ...

You are proposing that you port-forward the SMB/CIFS ports on your machine so that they are network-accessible, so that you could type in (assuming your IP is 1.2.3.4) "\\1.2.3.4\share" to access your files at home.

This is incredibly stupid to do. A smarter thing to do would to take a gun, point it at your head, and pull the trigger. Exposing your SMB ports to the Internet like that is such a security risk, that I hope some hacker destroys your machine (which they will if you port forward).

It is such a dangerous and idiotically stupid thing to do that, the reason it is NOT working, is that your Internet service provider has taken the liberty of blocking those ports before they even get to you.

****, four years ago, an article on security says to *disable* Windows file sharing to take care of security risks. The article is here: http://articles.techrepublic.com.com/5100-10878_11-6065923.html

If you really need to access your home machine that bad, there are far better solutions than giving hackers an open door to take your machine over. Use Hamachi, which is a VPN solution primarily target at gamers that want to play LAN-only multiplayer games over the Internet. It's encrypted and secure so you won't have to worry about hackers just walking into your PC to steal your data and turn your computer into a spam-creating botnet zombie.

I have no idea why you would even try this in the first place. You're Cisco certified - or at least your profile says as much - you should know better than to do something so incredibly dumb.

Collapse -

Re: Your idea is incredibly stupid

by pinnakavamsi · 11 years ago In reply to Your idea is incredibly s ...

Thx bro for taking so much care about me :). I am doing this for weekend fun. Let me worry about the hacker. he should be stupid hacker in world to hack my computer. Because he finds nothing in my computer. And i am forwarding ports of Vmware VM not the physical host. And no need to hack my PC, i will give my user credentials if any one wants :). Hey dude let me know if you want including my cisco routers rack :). As you said may be may ISP is blocking those ports. I tried Hamachi and Teamviewer , but not satisfied.

Collapse -

Harsh but true

by oldbaritone · 11 years ago In reply to Forwarding windows file s ...

Segin2005 is harsh, but he's right, if you do as you ask, you're just begging to have your system wiped out.

It may be that your DSL ISP has blocked the file share ports to the internet - if so, you should be glad that "they've got your back."

If you're trying to share files within your own network, on the "inside" of the router, you don't need to open the port forwarding.

If you're trying to share with the outside, there are several good options. One is VPN, which is a secure connection through the router. Few DSL routers support this, but it may be available as an option; check with your ISP.

Another option is SSH - Secure Shell, including PuTTY, tunneling, etc. You establish a secure connection to the machine and send files through the secure tunnel. There are many free versions available, and you only open one port (22 udp/tcp) through the router, and SSH uses certificates and keys similar to SSL - you accept the certificate the first time, and if it ever changes, SSH notifies you and verifies the certificate again before proceeding.

And for heaven's sake, please CLOSE THE PORTS and run a virus scan, malware scan and rootkit scan.

Collapse -

Re: Harsh but true

by pinnakavamsi · 11 years ago In reply to Harsh but true

Hello oldbaritone.

Thx for your reply. No need to worry about hacker or virus. because all those are virtual PCs (VMware VM's). and i opened ports 22 and 23 for virtual routers (Dynamips). If any one crash my routers also... no probs. I am doing this for knowledge purpose. Just preparing for my certification exam.

Collapse -

Well, then...

by segin2005 · 11 years ago In reply to Re: Harsh but true

Please, take the basic advice here to heart - and take note you'll never find SMB ports open to the net in any situation where it matters.

Collapse -

You should have mentioned in your first post

by seanferd · 11 years ago In reply to Re: Harsh but true

that you are doing this between VMWare VMs. Because that is likely your entire problem.

In the case of ports:
http://support.microsoft.com/kb/308127
http://www.chicagotech.net/netforums/viewtopic.php?t=5067
etc. http://www.google.com/search?ie=UTF-8&oe=utf-8&q=Window+file+sharing+ports

But VMWare is a different animal which must be accounted for. The images would need to have VMWare Tools installed in them, and you'd have to set up sharing the VMWare way, whatever that currently is.
http://www.vmware.com/support/ws3/doc/ws32_running9.html

http://www.google.com/search?ie=UTF-8&oe=utf-8&q=share+between+vmware+vm

Edit: And you did say "DSL Router". If all these virtual machines are on one physical machine, the DSL Router better be virtual, because those ports would need to be open on the physical and virtual machines. Unless the (if physical) DSL Router is between two or more physical machines hosting the virtual machines which are to communicate, you aren't opening ports in the right place. And UPnP in the Windows VMs and the router should open those ports automatically for a Windows service.

Collapse -

No probs, i will use FTP

by pinnakavamsi · 11 years ago In reply to Forwarding windows file s ...

Hello All,

Thx for your reply. I installed FTP server. i think it is better solution to access my computer files from out side. any way thanks to all. hey check this out... ftp://vamsi-network.blogdns.com this is my FTP.

Software

Question