1 2 Previous Next 17 Replies Latest reply: Nov 20, 2012 1:34 AM by simplic
MRCUR Level 2 Level 2 (425 points)

Hi Everyone,

 

I have a Lion Server setup running behind an AirPort Extreme which acts as our firewall and router. I'm having an issue getting external SMB (Windows File Sharing as it's called now) working. AFP works just fine for everyone, while SMB is only working on the internal network. Externally, AFP works just fine, but SMB results in the standard "Server cannot be contacted, etc." error - on both Macs and Windows machines.

 

I have tried numerous times to add a port mapping for SMB within the Server app and within the AirPort Utility. It doesn't work in either spot. I've restarted the APE too many times to count, and the same with the server itself. Anyone have any ideas? Have the SMB ports changed in Lion? Any help would be greatly appreciated - I'm pulling my hair out at this point!

 

Thanks,

-MRCUR


Mac OS X (10.7.1)
  • 1. Re: External SMB access not working
    Stress Test Level 4 Level 4 (1,265 points)

    Which ports have you forwarded? 137, 138, 139, 445 TCP&UDP?

     

    I would advise to not share AFP and SMB directly to the internet. Instead configure the VPN service and go through that tunnel for accessing the files! AFP and SMB isn't secured in a single way. So build up a secure VPN tunnel for it.

  • 2. Re: External SMB access not working
    MRCUR Level 2 Level 2 (425 points)

    Hi Stress Test,

     

    Yes, I am forwarding all of those ports to the server. Still not working. Below are two screenshots of the error I receive (on a Mac, Windows is similar), and the port forwarding setup.

     

    Error - http://cl.ly/0y272x2q3h2m1V2v0O02

    Port setup - http://cl.ly/280K0q2z1o3w273M3t0S

     

    I would like to implement VPN at some point, but for now, this is how my client is used to accessing their server remotely. I can only change so much at a time with them.

     

    Thanks for the assistance,

     

    -MRCUR

  • 3. Re: External SMB access not working
    MRCUR Level 2 Level 2 (425 points)

    Anyone have any ideas?

  • 4. Re: External SMB access not working
    Stress Test Level 4 Level 4 (1,265 points)

    Can you check that ports from outside? Open Terminal.app (Applications > Utilities) and insert

     

    nc -v <ip-address> <port>

     

    like

     

    nc -v publicserver.mycompany.com 137

     

    Do that with the 4 ports. Do you have success on all 4 ports, and have a look if they could be reached from the internet.

  • 5. Re: External SMB access not working
    MRCUR Level 2 Level 2 (425 points)

    Just checked all four ports over the Internet, and only 445 succeeded. All the others returned "connection refused". Any ideas why the AirPort would only be forwarding one of the four ports I have set up? It certainly seems like this is an issue with the AirPort and not Lion Server at this point.

     

    Thanks,

    -MRCUR

  • 6. Re: External SMB access not working
    Stress Test Level 4 Level 4 (1,265 points)

    Just tried it with my server:

     

    Local server: 445 succeeded, the other not, but connecting to the server is fine

  • 7. Re: External SMB access not working
    MRCUR Level 2 Level 2 (425 points)

    Hmm, this is quite puzzling then. We might just have to do without SMB then.

     

    Thanks,

    -MRCUR

  • 8. Re: External SMB access not working
    Stress Test Level 4 Level 4 (1,265 points)

    Yes very wired. Will have a look if there's an other possibility and return here.

  • 9. Re: External SMB access not working
    rgkeating Level 1 Level 1 (0 points)

    Doesn't look like this was fixed in 10.7.2 (Damnit!).  I have been using  http://www.mucommander.com/ since my Lion upgrade.

  • 10. Re: External SMB access not working
    rickblackdog Level 1 Level 1 (5 points)

    So outside your local network I assume you're using VPN?  Surely, as in all other Samba instances VPN is required to connect to a SMB share. 

  • 11. Re: External SMB access not working
    MRCUR Level 2 Level 2 (425 points)

    I haven't yet upgraded to 10.7.2, but I doubt that'll fix it. We'll see... At this point I've just told the users not to expect Windows access from outside of the local network. I would gladly move to VPN, but that lovely service ALSO won't work on Lion...

  • 12. Re: External SMB access not working
    MRCUR Level 2 Level 2 (425 points)

    No, I have no VPN going (partly because it's a hassle for the users, and because it won't run on Lion for some reason). This worked previously on Snow Leopard Server by simply opening up the required ports in the router/firewall and pointing them to the server. This no longer works with Lion Server.

  • 13. Re: External SMB access not working
    Joe_Rhodes Level 1 Level 1 (0 points)

    Has anyone been able to figure this out?  I'm running into the exact same issue.  I cannot get SMB file sharing to work on a Mac Mini Lion server (10.7.3) with port forwarding done by an Airport Extreme.  (Actually, in my case, it's a Time Capsule, but the built-in file sharing's been disabled.)

     

    I've been able to get AFP (via port 548) working.  But ports 137-139 and 445, though they are forwarded by the AEX, simply don't connect.  I keep getting the "server does not exist..." error message like the original poster.

     

    As has been mentioned earlier, if I'm connected via VPN, it works fine.  Unfortunately, that's not the ultimate solution for me in this case.  And it *should* work without.  Testing the "nc -v hostname.com 139" test mentioned above fails for all ports, 137-139 and 445.  But it works fine for port 548.  I know all the ports, both TCP and UDP are forwarded.  So it pretty much has to be the SMB server running on Lion Server.

     

    I'd love to hear if anyone's got this solved...

  • 14. Re: External SMB access not working
    MRCUR Level 2 Level 2 (425 points)

    Hi Joe,

     

    This is indeed working for me now. Unfortunately I don't know exactly when it started working or what caused it to work. I've only been made aware that it is working in the past few weeks.

     

    I'm now running AirPort firmware 7.6.1, which may have done. I'm also running Lion Server 10.7.3, which may have done it. I'm really not sure, but I would recommend updating to both of those if you haven't already and giving it another go.

     

    -MRCUR

1 2 Previous Next