Topic: Remote Windows File Sharing

[Graham]

Is it possible to access a Windows File Share out side of the local LAN without using VPN?

[chris burnat]

You can remotely access and manipulate the content of an ibay  over ssh, or sftp.  You will need to set the correct permissions in the ibay panel and enable ssh access in remote access panel.  Please be aware of the security risk when enabling external ssh access to your box. You can also use FTP, however, this is not recommended because of the known security risls associated with FTP - use it as a last resort.  Best would be to read the manual, all of this is clearly explained in the Wikis.  Come back here if you have any questions.  Hope it helps.
chris.

[mmccarn]

WinSCP (http://winscp.net/eng/index.php) and smeserver-remoteuseraccess (install instructions here, as part of another how-to: http://wiki.contribs.org/FTP_Access_to_Ibays#2._Install_the_smeserver-remoteuseraccess_contrib) can be combined to give you simple remote ssh access to your SME files and folders from Windows.

smeserver-remoteuseraccess has a field where you can put 'ssh keys' so you may (I've never tried it) be able to setup public-private keyed access to individual user folders very securely.

If you can get it to work, 'webdav' gives you read-write access remote folders from 'My Network Places'.  There are some oddities, but it can be done...

[Graham]

At the moment we are using SME as a file server, users can access there HOME directory using \\SERVER-1\USERNAME from the local network.

Now we have an application that needs to access data on that network when outside the Local Network, so I need to be able to access it like this from.

\\WAN IP GOES HERE\USERNAME

[mmccarn]

The short answer is that you can't do this securely.

You could try adding the remote IP address to your 'local networks' - which *might* let you open a share as you want, but would *definitely* expose things to the internet that are better left unexposed...

Is there a reason that a PPTP VPN is not an option?

[Graham]

I've have tried VPN and I can connect to SME but I'm not able to access any network shares.

Any Ideas

[girkers]

You may need to check your permissions, in that the computer your using for the VPN, is the user a registered user on your SME box.  Have you tried \\smeip\share?

[Graham]

When connected using VPN should you be able to ping the SME Server IP?

[girkers]

Theoretically yes, as you are in essence connected to your local network. On the windows machine do ipconfig /all and check the ip settings for the VPN connection and ensure they are in fact that of the SME network.

[Graham]

The IP the VPN has been given is fine.

When I try, \\SERVER IP\USERNAME I get

No network provider accepted the given network path

[chris burnat]

The IP the VPN has been given is fine.
When I try, \\SERVER IP\USERNAME I get
No network provider accepted the given network path

Maybe this is of assistance:
http://msmvps.com/blogs/nuoyan/archive/2004/11/07/18250.aspx

[Graham]

I think this has something to do with me not being able to ping the SME Server when connected using VPN.

[chris burnat]

Just in case... have you enabled VPN for the user in the user panel?

[Graham]

Yes, don't think you can connect if you don't

[mmccarn]

When I try, \\SERVER IP\USERNAME I get

Just to make sure - are you entering the LAN IP or the WAN IP?  (You should be using the LAN IP).

Also, what kind of antivirus are you running on the remote workstation?  Norton, McAfee, or almost any product that includes firewall "enhancements" is likely to have asked you the first time you attempted access whether to allow or deny your traffic, as the VPN connection is a "new" network as far as that workstation is concerned...  I suspect the default answer would result in VPN SMB traffic getting blocked...