Samba server with openSuSE 13.1 running Samba 4 (1. dedicated hardware), IP 192.168…0.2
Workstation (host) with openSuSE 13.1 with VirtualBox installed (2. dedicated hardware), IP 192.168…0.3
Inside the virtualbox of the workstation is running Win7 with NAT support for the network, (no dedicated hardware), IP 10.0.2.15
Now to my problem.
If the firewall on the workstation (host) is switched on, Win 7 inside virtualbox does not see the external Samba server on the other hardware. I need to switch the firewall off on the host so that Win 7 has access to the external Samba server. The Samba server should act like the primary domain server for Win 7. This is true as long as the FW on the host is off. If the FW is on and the network adapter on the host is connected to external zone, Win 7 does not see my Samba PDC.
I opened the network ports on the host in the “Advanced” section of the Yast FW module but still no success.
The opened ports were: TCP: 135, 139, 445 and UDP: 137, 138.
Other configurations in Virtualbox with “bridged” network settings were not working at all. So NAT in VB would be fine for me, but I need to open the FW somehow.
Without verifying your FW configuration is correct and working,
A very common cause of the problems you’re seeing is that local name resolution between the Host and Guest(s) is non-existent by default, so if you are trying to utilize or access network services by name, you’ll be SOL unless you address the problem (eg DNS, dnsmasq, localhost file entry, less often lmhost entry).
As is usual, you can verify connectivity using ip address and name by ping or telnet as your most common tools.
like I wrote: As long as the firewall on the host (where Virtualbox ist running) is switched of I can join the domain of the Samba server with my Win7 guest. If the firewall on the host whre Virtualbox is running is on the connecton from the Win7 guest with the domain controller is not working any more. According to this the firewall of the host is blocking some ports which are needed by the Win7 guest to connect to the domain server.
Now I opened:
TCP: 53, 135, 139, 445
UDP 53, 137, 138
but this is still not enough.
Can somebody tell my which more are needed? Those from above I found in the Samba documentation.
I found the reason. My Win7 running insde Virtualbox is using some dynamic RPC ports. Those were blocked by the firewall running on the host. If I open a range of ports on the host for the RPC then it works.