Error: A firewall is blocking file sharing between Windows and the containers #2677

janne-j · 2018-10-02T07:44:42Z

I have tried with the latest version of my channel (Stable or Edge)
I have uploaded Diagnostics
Diagnostics ID: 52ED87FF-A339-471A-B711-E6A2B4CDE7D2/20181002090201

Expected behavior

Share drives on Windows 10 should succeed

Actual behavior

Error: A firewall is blocking file sharing between Windows and the containers

Information

I've tried the following workarounds / steps but the problem persists:
https://success.docker.com/article/error-a-firewall-is-blocking-file-sharing-between-windows-and-the-containers
http://stackoverflow.com/questions/42203488/settings-to-windows-firewall-to-allow-docker-for-windows-to-share-drive/43904051#43904051
http://blog.medhat.ca/2017/01/docker-on-windows-10-error-firewall-is.html
http://www.kajabity.com/2017/08/unblock-docker-for-windows-firewall-issues-with-host-volumes/

Seems to be ongoing issue, here's a few more duplicate issues
Error: A firewall is blocking file sharing between Windows and the containers #2512
Upgraded and Can't share drive with docker I get: Error: A firewall is blocking file Sharing between Windows and the containers #2527
Windows 10: Docker for Windows: unable to share drive #2549
Windows 10: Docker for Windows: unable to share drive #690
Cannot Share drives Windows10 #1801
Unable to share drives #803
Windows 10 - Firewall Share C:\ Drive Blocking Problem - Many Proposed Solution Attempted #2628
Drive sharing seems to be blocked by a firewall #2629
New install of Windows 10 and Docker, unable to share drive false firewall error #2369
Error: A firewall is blocking file Sharing between Windows and the containers #355
firewall is blocking file sharing between windows and the containers #2159
Unable to share drive, complains firewall is blocking #738
Sharing drive fails with "Firewall detected" dialog box #345
Unable to share C: Drive [firewall] #466
Share Drive #2198

Windows Version:
Windows 10 Enterprise Version 1709 build 16299.665
Docker for Windows Version:
Version 2.0.0.0-beta1-win75 (19925)
Channel: edge

Steps to reproduce the behavior

Launch Docker
When Docker is running, from 'Shared Drives' select C and click Apply

samiulanik · 2018-10-06T19:40:14Z

I am also having exact same issue. Tried lots of thing, nothing works.
Diagnostic Id: FCDAC24B-473C-41BA-9F97-7450EB28CD38/20181006124621
Windows Version:
Windows 10 Pro Version 1803 build 17134.285
Docker Windows Version:
Version 18.06.1-ce-win73 (19507)
Channel: stable

Ultronvision · 2018-10-08T09:28:21Z

I have also same issue firewall blocking, searching a lot but found nothing, I am using Docker version 18.06.1-ce, build e68fc7a at Window 10 pro.

janne-j · 2018-10-23T07:52:03Z

Update:

Our IT support created a new group policy for F-Secure that allows me to turn firewall off. After disabling firewall sharing drives on Docker works alright but firewall needs to be disabled whenever trying to mount anything to a container.

ThinhTT84 · 2018-10-30T02:59:04Z

I have windows 10 1803, Firewall is off (both Windows Defender & McAfee Endpoint Security) but still cannot share the driver. I tried to uninstall File and Print sharing service on the Hyper-V virtual network card as suggestion in document but cannot do it.

janne-j · 2018-10-30T07:15:05Z

I have windows 10 1803, Firewall is off (both Windows Defender & McAfee Endpoint Security) but still cannot share the driver. I tried to uninstall File and Print sharing service on the Hyper-V virtual network card as suggestion in document but cannot do it.

First turn off Docker (wait until completely closed)
Disable Firewall
Turn on Docker
Share drive

ThinhTT84 · 2018-10-30T10:07:39Z

First turn off Docker (wait until completely closed)
Disable Firewall

I have firewall completely off from beginning already :(.

p-obrien · 2018-10-30T23:35:45Z

I'm having this issue because the VM is trying to use SMB v1 to connect to the C: Share but our enterprise has disabled SMB v1 due to age and security issues.

You can verify if this is the issue by checking the following registry key: HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters and seeing if the key SMB1 is set to 0 or not.

Whilst enabling SMB v1 can resolve the issue its been disabled by default in Windows 10 for good reason and a more permanent fix is needed.

ThinhTT84 · 2018-10-31T04:22:57Z

You can verify if this is the issue by checking the following registry key: HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters and seeing if the key SMB1 is set to 0 or not.

This key is not available on my machine, I tried to add and set it value to 1, restart computer and tried share again but still no luck

p-obrien · 2018-10-31T05:39:59Z

Do you have the SMB components installed, Windows 10 doesn't have these installed by default?

You can check with this powershell:
Get-WindowsOptionalFeature –Online –FeatureName SMB1Protocol

If you choose to install SMB v1 you could use this command (however I don't recommend it):
Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

In my environment I have the feature installed however group policy disables SMB v1 which prevents the file sharing from working.

p-obrien · 2018-10-31T05:48:52Z

Interesting, I followed these instructions and it worked for me #313 (comment)

janne-j · 2018-10-31T09:14:24Z

Interesting, I followed these instructions and it worked for me #313 (comment)

Sharing is possible with local admin rights but after applying changes it won't persist and volume remains unshared.

janne-j · 2018-10-31T09:41:54Z

Whilst enabling SMB v1 can resolve the issue its been disabled by default in Windows 10 for good reason and a more permanent fix is needed.

SMB1 seems to be already enabled on my machine. No luck with this workaround.

p-obrien · 2018-10-31T10:38:15Z

Confirming #313 (comment) works for me after a reboot and with SMB v1 disabled.

tonyhxh · 2018-11-10T04:58:42Z

Also tried following from #313, no luck.

Navigate to C:\Users\Public\Documents\Hyper-V (it will ask administrative permission)
Click on folder "Virtual hard disks"
Here you will find "MobyLinuxVM.vhdx", just right click on it and goto context menu "Share with -> Advanced sharing settings..."
There you just go ahead and enable sharing under Public folder sharing blade and that's it.

Upload diagnostic: 1F80BF17-0910-406C-87B0-0B4571194B20/20181110001015

janne-j · 2018-12-20T13:12:33Z

In our case solution was to create a policy for F-Secure that allows filesharing from networks 192.168.65.0/24, 10.0.75.0/24 and 127.0.0.1

I'll have to dig into if those IP's are out-the-box or specific to my current network configuration. In other words, we'll test the same policy from an another developer's workstation.

docker-robott · 2019-03-20T02:00:51Z

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale comment.
Stale issues will be closed after an additional 30d of inactivity.

Prevent issues from auto-closing with an /lifecycle frozen comment.

If this issue is safe to close now please do so.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle stale

RobinHSanner · 2019-03-26T19:47:28Z

I am having the same issues. I have tried all the workaround with no luck including turning off my firewall

/remove-lifecycle stale

alphabytes · 2019-03-28T06:35:21Z

facing the same issue... tried all the suggested solutions above, none of them worked.

RobinHSanner · 2019-03-28T14:58:43Z

A fellow worker clued me in on how to fix it. Create a local account (note that this isn't a domain account with local administrators access) with membership in the groups 'Administrators' (the local one) and 'docker-users'. Then when Docker prompts for credentials enter the credentials of your local administrator account. I use Norton Smart Firewall and to get to the point where it would prompt me for credentials I still had to do the firewall exception thing.

oscar6echo · 2019-04-18T09:09:03Z

Same here.
I'm not able to create a local account as it is a corporate machine.
In this context, it seems there is no way to share local drives...

rdagumampan · 2019-05-17T13:47:56Z

We had similar issue and this blocking us from exploring SQL Server on containers for dev machines. Our devs runs on windows with Docker CE. The issue seems to have been existing for years with no clear resolution.

LisaBurleson · 2019-05-22T03:18:11Z

I've tried all the solutions proposed and still no joy. Docker works fine on my home computer, but it won't work on my work laptop (which has the firewall turned off). I have admin rights. I've uninstalled and re-installed a couple times just to be sure. I guess I just can't use it on this machine. Or I just copy all the files into the docker image and don't mount a local drive.

djbios · 2019-05-22T09:59:37Z

Not working on my home PC. Interesting noticed: when I trying to share my C drive manualy (in explorer), after that, I see it in \\10.0.75.1\c , but when I try to check C drive in docker gui for sharing, it shows me "A firewall is blocking file sharing between Windows and the containers", and disable my manually created share. I've tried all solutions proposed here, still nothing.

var23rav · 2019-05-28T07:36:17Z

For Cisco Any-Connect(vpn) client try this solution

coltenkrauter · 2019-08-01T19:35:55Z

Open powershell as admin and run this,

Set-NetConnectionProfile -interfacealias "vEthernet (DockerNAT)" -NetworkCategory Private

LisaBurleson · 2019-08-01T23:52:41Z

I just tried that solution and it didn't change the firewall message. I tried messing with the .docker folder permission per #3385 and that didn't work either. The search continues...
Thanks for the suggestion.

Amro-Hassan · 2019-09-16T19:47:58Z

@coltenkrauter solution worked for me.

abmptit · 2019-10-31T13:40:26Z

I tried all workaround, any new clues plz?

ndywicki · 2019-11-22T17:17:41Z

Same issue, I've already tests all sugestions.

I can telnet my SMB service on 445, but I can't change the network caterory (NLM Policies group):

PS C:\WINDOWS\system32> Set-NetConnectionProfile -interfacealias "vEthernet (DockerNAT)" -NetworkCategory Private
Set-NetConnectionProfile : Unable to set the NetworkCategory due to one of the following possible reasons: not running
PowerShell elevated; the NetworkCategory cannot be changed from 'DomainAuthenticated'; user initiated changes to
NetworkCategory are being prevented due to the Group Policy setting 'Network List Manager Policies'.
Au caractère Ligne:1 : 1
+ Set-NetConnectionProfile -interfacealias "vEthernet (DockerNAT)" -Net ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : PermissionDenied: (MSFT_NetConnect...9B5E1E4E54DE}"):root/StandardCi...nnectionProfile)
   [Set-NetConnectionProfile], CimException
    + FullyQualifiedErrorId : MI RESULT 2,Set-NetConnectionProfile

So, I found how I can mount manually a CIFS volume V3 version like:

docker volume create --driver local --opt type=cifs --opt device=//X.X.X.X/C/workspaces/myVolume --opt o=user=XXXX,domain=XX,password=XXXX,vers=3.02 --name myVolume

And use it, ex. in docker-compose:

services:
   ...
   volumes:
      - myVolume:/PATH_INSIDE_CONTAINER

volumes:
   myVolume:
      # this will use the volume created beforehand
      external: true

But is very painful...

stephen-turner · 2020-02-11T14:22:11Z

This is fixed with the new filesharing implementation in 2.2.0.3, so closing this ticket.

ndywicki · 2020-02-17T13:38:02Z

I've update my windows docker client.... And it's work !!!!!
Thank you very much 😍

docker-robott · 2020-07-02T03:10:19Z

Closed issues are locked after 30 days of inactivity.
This helps our team focus on active issues.

If you have found a problem that seems similar to this, please open a new issue.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle locked

docker-robott added lifecycle/stale and removed lifecycle/stale labels Mar 20, 2019

chrisfalter mentioned this issue Nov 24, 2019

Troubleshooting steps fail for "firewall blocking file sharing" on Windows 10 #5206

Closed

stephen-turner closed this as completed Feb 11, 2020

docker-robott added the lifecycle/locked label Jul 2, 2020

docker locked and limited conversation to collaborators Jul 2, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Error: A firewall is blocking file sharing between Windows and the containers #2677

Error: A firewall is blocking file sharing between Windows and the containers #2677

janne-j commented Oct 2, 2018 •

edited

Loading

samiulanik commented Oct 6, 2018 •

edited

Loading

Ultronvision commented Oct 8, 2018

janne-j commented Oct 23, 2018

ThinhTT84 commented Oct 30, 2018

janne-j commented Oct 30, 2018

ThinhTT84 commented Oct 30, 2018

p-obrien commented Oct 30, 2018

ThinhTT84 commented Oct 31, 2018

p-obrien commented Oct 31, 2018

p-obrien commented Oct 31, 2018

janne-j commented Oct 31, 2018

janne-j commented Oct 31, 2018

p-obrien commented Oct 31, 2018

tonyhxh commented Nov 10, 2018 •

edited

Loading

janne-j commented Dec 20, 2018 •

edited

Loading

docker-robott commented Mar 20, 2019

RobinHSanner commented Mar 26, 2019

alphabytes commented Mar 28, 2019

RobinHSanner commented Mar 28, 2019

oscar6echo commented Apr 18, 2019

rdagumampan commented May 17, 2019

LisaBurleson commented May 22, 2019

djbios commented May 22, 2019 •

edited

Loading

var23rav commented May 28, 2019

coltenkrauter commented Aug 1, 2019

LisaBurleson commented Aug 1, 2019

Amro-Hassan commented Sep 16, 2019

abmptit commented Oct 31, 2019

ndywicki commented Nov 22, 2019

stephen-turner commented Feb 11, 2020

ndywicki commented Feb 17, 2020

docker-robott commented Jul 2, 2020

Error: A firewall is blocking file sharing between Windows and the containers #2677

Error: A firewall is blocking file sharing between Windows and the containers #2677

Comments

janne-j commented Oct 2, 2018 • edited Loading

Expected behavior

Actual behavior

Information

Steps to reproduce the behavior

samiulanik commented Oct 6, 2018 • edited Loading

Ultronvision commented Oct 8, 2018

janne-j commented Oct 23, 2018

ThinhTT84 commented Oct 30, 2018

janne-j commented Oct 30, 2018

ThinhTT84 commented Oct 30, 2018

p-obrien commented Oct 30, 2018

ThinhTT84 commented Oct 31, 2018

p-obrien commented Oct 31, 2018

p-obrien commented Oct 31, 2018

janne-j commented Oct 31, 2018

janne-j commented Oct 31, 2018

p-obrien commented Oct 31, 2018

tonyhxh commented Nov 10, 2018 • edited Loading

janne-j commented Dec 20, 2018 • edited Loading

docker-robott commented Mar 20, 2019

RobinHSanner commented Mar 26, 2019

alphabytes commented Mar 28, 2019

RobinHSanner commented Mar 28, 2019

oscar6echo commented Apr 18, 2019

rdagumampan commented May 17, 2019

LisaBurleson commented May 22, 2019

djbios commented May 22, 2019 • edited Loading

var23rav commented May 28, 2019

coltenkrauter commented Aug 1, 2019

LisaBurleson commented Aug 1, 2019

Amro-Hassan commented Sep 16, 2019

abmptit commented Oct 31, 2019

ndywicki commented Nov 22, 2019

stephen-turner commented Feb 11, 2020

ndywicki commented Feb 17, 2020

docker-robott commented Jul 2, 2020

janne-j commented Oct 2, 2018 •

edited

Loading

samiulanik commented Oct 6, 2018 •

edited

Loading

tonyhxh commented Nov 10, 2018 •

edited

Loading

janne-j commented Dec 20, 2018 •

edited

Loading

djbios commented May 22, 2019 •

edited

Loading