Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a Windows Server 2012 that I have shared a folder that is accessible from within our network. I am running into an issue with being able to access this folder from a remote computer on another network with no VPN in place, and would rather not have a VPN in place. I realize that this is less secure, but it is what my client is requesting. I have a public IP for this server and I am able to remote into it successfully, however I am still not able to access the shared folder. I have fully disabled the firewall on this system, and even temporarily disabled our firewall to make sure that it was not being caused by the firewall. Any ideas on how I can accomplish this?

share|improve this question

2 Answers 2

You can open ports 445 and 139 on the firewall with static NATs from the external IP to the internal IP, but that would be very insecure and highly discouraged. It should work though, assuming they can also browse outbound on those ports (their firewall isn't blocking outbound access to 445 and 139).

Using a VPN or other means would be better. You could look at setting up a secure FTP site on the server with access to those files/folders or using something like WingFTP or similar to allow https access.

share|improve this answer
    
Thank you for this information. Would I be opening up these ports on my firewall, the server firewall, or somewhere else? If on the server or our firewall, I have already tried with those fully disabled. VPN would be best, but my client is wanting to do this without a VPN if at all possible. –  user175629 May 28 '13 at 18:18
    
The server's Windows firewall needs to be disabled or setup with the correct open ports. Then you will need to setup port forwarding/reverse NAT on your internet facing firewall to direct a WAN IP to your internal server IP using those ports. Disabling that firewall won't make it work like that. –  TheCleaner May 28 '13 at 19:05

Even if you do open the necessary ports to enable Windows file sharing traffic in, you will be blocked as a client from almost any network from getting there, because these are some of the most highly blocked ports on the web, and for good security reasons. So even if you can accomplish this, you shouldn't.

Other better options:

  1. Ideally, deploy SharePoint to publish your content
  2. If you only need to allow people to download, you can use an IIS site with a virtual directory pointed at the folder(s) you want to publish. This way people can browse and download files in the old school way over HTTP/S.
  3. Use an FTP site as @TheCleaner suggests.
  4. Set up VPN. For as much work as you're doing to configure the share, you can accomplish a VPN with Windows Server Routing and Remote Access (if no money for a good VPN solution).

Hope that helps.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.