Windows 10: SMB connection problem after KB5052093 connection request is not addressed to port 445 but...

Hi, I have 4 PCs with Windows 11 Pro. Two of them have been updated with KB5050577, and since then they have encountered problems with the SNB connection. Specifically using wireshark I saw that the connection request is not addressed to port 445 but to port 80.Some tests:-----------------------40 5.820586 192.168.1.38 192.168.1.2 TCP 66 52731 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM 41 5.823245 192.168.1.2 192.168.1.38 TCP 66 80 → 52731 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM 42 5.823468 192.168.1.38 192.168.1.2 TCP 54 52731 → 80 [ACK] Seq=1 Ack=1

:)

 

BLOCK Outbound SMB Port 445 to Access Internet based shared and Allow SMB Port 445 to access Local Network Shares

Hi Elise,

Thank you for the quick response.

My Scenario is as below,

1. I work from home and connected to my Public Profile Wifi

2. Also, i use my corporate VPN Client to connect to my Corporate Network, the a Adapter has identified as "Public:.

What i need is

1. Block the SMB 445 port to internet (Eg: Block 443 port for "portquiz.net")

2. Allow the SMB 445 port to access my corporate network SMB shares through the VPN connection (Eg: Allow 443 port for my "corporate.contoso.com" DFS.)

Is there any way of archiving the above Goal through the windows firewall?

Thanks
Muja

 

BLOCK Outbound SMB Port 445 to Access Internet based shared and Allow SMB Port 445 to access Local Network Shares

HI,

I want to know how i can BLOCK Outbound SMB Port 445 to Access Internet based shared and Allow SMB Port 445 to access Local Network Shares from the Windows Firewall Rules in Windows 10.

Can anyone help me on this?

Thanks
Muja

 

Problem to connect via SMB

Hi, I have a strange problem with my new laptop (Win10 20H2) when trying to connect network resources via SMB in my local network (e.g. my NAS). I can connect the local resources with other laptops (all Win10) but not with the new laptop. I can ping the resources and also connect to the resources via telnet using the IP and port 445 (SMB). But when I enter \\<nas-ip>\ in the windows explorer or try to setup a network drive to a NAS share I always get the error "You might not have permission to use this network resource..."

The laptop with the connection issues is a company laptop and I logon with a mail address and password. When trying to connect to the NAS a popup appears and I enter 'admin' and password like I do with the other laptops. The only difference is that the username field says 'mail address'. I went through all the help articles, have activated smb v1, enabeld windows services, ... So far without success. Seems to be an authentication issue or a problem related to the slightly different logon dialog (see above: mail addresse instead of username)

Is there a way how to analyze the problem? Do I have to specify the domain in this special case? And if so how could I do that? I've tried 192.168.0.3\admin as username/mail address but this also didn't work. Any help is highly appreciated because I already spent several hours with that issue. Erich