File Sharing Port?

I would like to map a drive/folder on my Windows Server 2003 to my desktop.
Do I need to open a specific port on the server to enable in this? For
example: I have to open port 80 to enable Http trafficr.

Hi,

Are you trying to connect from different network or on the same network
where the server is? Are there any firewalls between your computer and the
server?

If you would like to map network drive from home computer to server in your
office over the internet this would not be recommended from security
perspective.
In this case it would be better if you would use e.g. VPN to connect to your
office and then access the share over the VPN connection.

Service overview and network port requirements for the Windows Server system
http://support.microsoft.com/default...uct=winsvr2003

--
Mike
Microsoft MVP - Windows Security


"C Thomas" <C (E-Mail Removed)> wrote in message
news:1A6C281E-9AAD-429A-9876-(E-Mail Removed)...
>I would like to map a drive/folder on my Windows Server 2003 to my desktop.
> Do I need to open a specific port on the server to enable in this? For
> example: I have to open port 80 to enable Http trafficr.

Hi Mike,

Thanks for the response. The server I would like to map to is on the same
network as my workstation at the office, but it is behind a firewall. The
firewall will only let me access the server based on the fixed IP and MAC
address of my workstation. Since I will only need to access the server from
my workstation
at the office, do you think their would be any security issues with mapping a
drive on the server to my workstation?

Thanks.

Miha Pihler [MVP]" wrote:

> Hi,
>
> Are you trying to connect from different network or on the same network
> where the server is? Are there any firewalls between your computer and the
> server?
>
> If you would like to map network drive from home computer to server in your
> office over the internet this would not be recommended from security
> perspective.
> In this case it would be better if you would use e.g. VPN to connect to your
> office and then access the share over the VPN connection.
>
> Service overview and network port requirements for the Windows Server system
> http://support.microsoft.com/default...uct=winsvr2003
>
> --
> Mike
> Microsoft MVP - Windows Security
>
>
> "C Thomas" <C (E-Mail Removed)> wrote in message
> news:1A6C281E-9AAD-429A-9876-(E-Mail Removed)...
> >I would like to map a drive/folder on my Windows Server 2003 to my desktop.
> > Do I need to open a specific port on the server to enable in this? For
> > example: I have to open port 80 to enable Http trafficr.
>
>
>

Hi,

One more question. Is this firewall installed on this server (Windows
Firewall) or is this firewall running on another equipment.
On the link that I provided in my previous post -- there is port requirement
list for different services (For file shares you will usually need TCP 139,
UDP 138, UDP 137, TCP 445). How to open required TCP/UDP ports depends on
your firewall solution... In e.g. Windows Firewall you have a check mark
that says "File and Printer Sharing" Check Point Firewall has another
definition called "CIFS" so does Symantec Enterprise Firewall etc...

Filtering this access by MAC is not very useful. You can change the MAC
address in about 10-30 seconds and you are broadcasting it all the time to
whole network -- so every PC on your subnet knows your MAC address. It is
also very easy to change IP address.

--
Mike
Microsoft MVP - Windows Security

"C Thomas" <(E-Mail Removed)> wrote in message
news:F719DB97-A4FD-425E-B3F2-(E-Mail Removed)...
> Hi Mike,
>
> Thanks for the response. The server I would like to map to is on the same
> network as my workstation at the office, but it is behind a firewall. The
> firewall will only let me access the server based on the fixed IP and MAC
> address of my workstation. Since I will only need to access the server
> from
> my workstation
> at the office, do you think their would be any security issues with
> mapping a
> drive on the server to my workstation?
>
> Thanks.
>
> Miha Pihler [MVP]" wrote:
>
>> Hi,
>>
>> Are you trying to connect from different network or on the same network
>> where the server is? Are there any firewalls between your computer and
>> the
>> server?
>>
>> If you would like to map network drive from home computer to server in
>> your
>> office over the internet this would not be recommended from security
>> perspective.
>> In this case it would be better if you would use e.g. VPN to connect to
>> your
>> office and then access the share over the VPN connection.
>>
>> Service overview and network port requirements for the Windows Server
>> system
>> http://support.microsoft.com/default...uct=winsvr2003
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>>
>> "C Thomas" <C (E-Mail Removed)> wrote in message
>> news:1A6C281E-9AAD-429A-9876-(E-Mail Removed)...
>> >I would like to map a drive/folder on my Windows Server 2003 to my
>> >desktop.
>> > Do I need to open a specific port on the server to enable in this? For
>> > example: I have to open port 80 to enable Http trafficr.
>>
>>
>>

Hi,

The firewall is not installed on the server. It's a hardware firewall. My
workstation and the server are setup on a VPN. Someone else will handle
opening the ports.
My main concern now is security. Now that you know a little more about the
setup, do you still think security would be an issue? If so, I will just
have to come up with an alternative.

"Miha Pihler [MVP]" wrote:

> Hi,
>
> One more question. Is this firewall installed on this server (Windows
> Firewall) or is this firewall running on another equipment.
> On the link that I provided in my previous post -- there is port requirement
> list for different services (For file shares you will usually need TCP 139,
> UDP 138, UDP 137, TCP 445). How to open required TCP/UDP ports depends on
> your firewall solution... In e.g. Windows Firewall you have a check mark
> that says "File and Printer Sharing" Check Point Firewall has another
> definition called "CIFS" so does Symantec Enterprise Firewall etc...
>
> Filtering this access by MAC is not very useful. You can change the MAC
> address in about 10-30 seconds and you are broadcasting it all the time to
> whole network -- so every PC on your subnet knows your MAC address. It is
> also very easy to change IP address.
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "C Thomas" <(E-Mail Removed)> wrote in message
> news:F719DB97-A4FD-425E-B3F2-(E-Mail Removed)...
> > Hi Mike,
> >
> > Thanks for the response. The server I would like to map to is on the same
> > network as my workstation at the office, but it is behind a firewall. The
> > firewall will only let me access the server based on the fixed IP and MAC
> > address of my workstation. Since I will only need to access the server
> > from
> > my workstation
> > at the office, do you think their would be any security issues with
> > mapping a
> > drive on the server to my workstation?
> >
> > Thanks.
> >
> > Miha Pihler [MVP]" wrote:
> >
> >> Hi,
> >>
> >> Are you trying to connect from different network or on the same network
> >> where the server is? Are there any firewalls between your computer and
> >> the
> >> server?
> >>
> >> If you would like to map network drive from home computer to server in
> >> your
> >> office over the internet this would not be recommended from security
> >> perspective.
> >> In this case it would be better if you would use e.g. VPN to connect to
> >> your
> >> office and then access the share over the VPN connection.
> >>
> >> Service overview and network port requirements for the Windows Server
> >> system
> >> http://support.microsoft.com/default...uct=winsvr2003
> >>
> >> --
> >> Mike
> >> Microsoft MVP - Windows Security
> >>
> >>
> >> "C Thomas" <C (E-Mail Removed)> wrote in message
> >> news:1A6C281E-9AAD-429A-9876-(E-Mail Removed)...
> >> >I would like to map a drive/folder on my Windows Server 2003 to my
> >> >desktop.
> >> > Do I need to open a specific port on the server to enable in this? For
> >> > example: I have to open port 80 to enable Http trafficr.
> >>
> >>
> >>
>
>
>

Hi,

Inside the LAN -- it shouldn't be an issue...

From home -- defenitely an issue and should be done e.g. over VPN.

--
Mike
Microsoft MVP - Windows Security

"C Thomas" <(E-Mail Removed)> wrote in message
news:0BC4F192-4D02-4E46-8B45-(E-Mail Removed)...
> Hi,
>
> The firewall is not installed on the server. It's a hardware firewall.
> My
> workstation and the server are setup on a VPN. Someone else will handle
> opening the ports.
> My main concern now is security. Now that you know a little more about
> the
> setup, do you still think security would be an issue? If so, I will just
> have to come up with an alternative.
>
> "Miha Pihler [MVP]" wrote:
>
>> Hi,
>>
>> One more question. Is this firewall installed on this server (Windows
>> Firewall) or is this firewall running on another equipment.
>> On the link that I provided in my previous post -- there is port
>> requirement
>> list for different services (For file shares you will usually need TCP
>> 139,
>> UDP 138, UDP 137, TCP 445). How to open required TCP/UDP ports depends on
>> your firewall solution... In e.g. Windows Firewall you have a check mark
>> that says "File and Printer Sharing" Check Point Firewall has another
>> definition called "CIFS" so does Symantec Enterprise Firewall etc...
>>
>> Filtering this access by MAC is not very useful. You can change the MAC
>> address in about 10-30 seconds and you are broadcasting it all the time
>> to
>> whole network -- so every PC on your subnet knows your MAC address. It is
>> also very easy to change IP address.
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "C Thomas" <(E-Mail Removed)> wrote in message
>> news:F719DB97-A4FD-425E-B3F2-(E-Mail Removed)...
>> > Hi Mike,
>> >
>> > Thanks for the response. The server I would like to map to is on the
>> > same
>> > network as my workstation at the office, but it is behind a firewall.
>> > The
>> > firewall will only let me access the server based on the fixed IP and
>> > MAC
>> > address of my workstation. Since I will only need to access the server
>> > from
>> > my workstation
>> > at the office, do you think their would be any security issues with
>> > mapping a
>> > drive on the server to my workstation?
>> >
>> > Thanks.
>> >
>> > Miha Pihler [MVP]" wrote:
>> >
>> >> Hi,
>> >>
>> >> Are you trying to connect from different network or on the same
>> >> network
>> >> where the server is? Are there any firewalls between your computer and
>> >> the
>> >> server?
>> >>
>> >> If you would like to map network drive from home computer to server in
>> >> your
>> >> office over the internet this would not be recommended from security
>> >> perspective.
>> >> In this case it would be better if you would use e.g. VPN to connect
>> >> to
>> >> your
>> >> office and then access the share over the VPN connection.
>> >>
>> >> Service overview and network port requirements for the Windows Server
>> >> system
>> >> http://support.microsoft.com/default...uct=winsvr2003
>> >>
>> >> --
>> >> Mike
>> >> Microsoft MVP - Windows Security
>> >>
>> >>
>> >> "C Thomas" <C (E-Mail Removed)> wrote in message
>> >> news:1A6C281E-9AAD-429A-9876-(E-Mail Removed)...
>> >> >I would like to map a drive/folder on my Windows Server 2003 to my
>> >> >desktop.
>> >> > Do I need to open a specific port on the server to enable in this?
>> >> > For
>> >> > example: I have to open port 80 to enable Http trafficr.
>> >>
>> >>
>> >>
>>
>>
>>

Great, thanks for your help!

"Miha Pihler [MVP]" wrote:

> Hi,
>
> Inside the LAN -- it shouldn't be an issue...
>
> From home -- defenitely an issue and should be done e.g. over VPN.
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "C Thomas" <(E-Mail Removed)> wrote in message
> news:0BC4F192-4D02-4E46-8B45-(E-Mail Removed)...
> > Hi,
> >
> > The firewall is not installed on the server. It's a hardware firewall.
> > My
> > workstation and the server are setup on a VPN. Someone else will handle
> > opening the ports.
> > My main concern now is security. Now that you know a little more about
> > the
> > setup, do you still think security would be an issue? If so, I will just
> > have to come up with an alternative.
> >
> > "Miha Pihler [MVP]" wrote:
> >
> >> Hi,
> >>
> >> One more question. Is this firewall installed on this server (Windows
> >> Firewall) or is this firewall running on another equipment.
> >> On the link that I provided in my previous post -- there is port
> >> requirement
> >> list for different services (For file shares you will usually need TCP
> >> 139,
> >> UDP 138, UDP 137, TCP 445). How to open required TCP/UDP ports depends on
> >> your firewall solution... In e.g. Windows Firewall you have a check mark
> >> that says "File and Printer Sharing" Check Point Firewall has another
> >> definition called "CIFS" so does Symantec Enterprise Firewall etc...
> >>
> >> Filtering this access by MAC is not very useful. You can change the MAC
> >> address in about 10-30 seconds and you are broadcasting it all the time
> >> to
> >> whole network -- so every PC on your subnet knows your MAC address. It is
> >> also very easy to change IP address.
> >>
> >> --
> >> Mike
> >> Microsoft MVP - Windows Security
> >>
> >> "C Thomas" <(E-Mail Removed)> wrote in message
> >> news:F719DB97-A4FD-425E-B3F2-(E-Mail Removed)...
> >> > Hi Mike,
> >> >
> >> > Thanks for the response. The server I would like to map to is on the
> >> > same
> >> > network as my workstation at the office, but it is behind a firewall.
> >> > The
> >> > firewall will only let me access the server based on the fixed IP and
> >> > MAC
> >> > address of my workstation. Since I will only need to access the server
> >> > from
> >> > my workstation
> >> > at the office, do you think their would be any security issues with
> >> > mapping a
> >> > drive on the server to my workstation?
> >> >
> >> > Thanks.
> >> >
> >> > Miha Pihler [MVP]" wrote:
> >> >
> >> >> Hi,
> >> >>
> >> >> Are you trying to connect from different network or on the same
> >> >> network
> >> >> where the server is? Are there any firewalls between your computer and
> >> >> the
> >> >> server?
> >> >>
> >> >> If you would like to map network drive from home computer to server in
> >> >> your
> >> >> office over the internet this would not be recommended from security
> >> >> perspective.
> >> >> In this case it would be better if you would use e.g. VPN to connect
> >> >> to
> >> >> your
> >> >> office and then access the share over the VPN connection.
> >> >>
> >> >> Service overview and network port requirements for the Windows Server
> >> >> system
> >> >> http://support.microsoft.com/default...uct=winsvr2003
> >> >>
> >> >> --
> >> >> Mike
> >> >> Microsoft MVP - Windows Security
> >> >>
> >> >>
> >> >> "C Thomas" <C (E-Mail Removed)> wrote in message
> >> >> news:1A6C281E-9AAD-429A-9876-(E-Mail Removed)...
> >> >> >I would like to map a drive/folder on my Windows Server 2003 to my
> >> >> >desktop.
> >> >> > Do I need to open a specific port on the server to enable in this?
> >> >> > For
> >> >> > example: I have to open port 80 to enable Http trafficr.
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>