Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error: A firewall is blocking file Sharing between Windows and the containers #355

Closed
medhatelmasry opened this issue Dec 25, 2016 · 98 comments

Comments

@medhatelmasry
Copy link

Expected behavior

I am using Docker for windows 10 with a Linux container. I am unable to share a drive. I get a firewall error when I do so similar to case #345. This was working OK until I reset my credentials and it stopped working.

Actual behavior

When I try to share any drive I get error:
A firewall is blocking file Sharing between Windows and the containers. See documentation for more info.

Information

Diagnostic ID is
1ED2444F-86D2-400A-A2AC-165C6FA6599A/2016-12-24_21-28-25

Steps to reproduce the behavior

  1. Right-click on the docker icon in the Windows 10 tray and select Settings
  2. Click on Shared Drives tab
  3. Enable C, D, and E drives then click on Apply button
  4. Following error is displayed: A firewall is blocking file Sharing between Windows and the containers. See documentation for more info.
@sugun999
Copy link

Do you have any 3rd party security software(example, f-secure) installed on your system? If so, you need to open firewall with security software

@johnrb2
Copy link

johnrb2 commented Dec 28, 2016

I got this issue and it was coming from my cisco vpn. Once I disabled the VPN I could share just fine but now I don't have access to the databases I need....

@medhatelmasry
Copy link
Author

medhatelmasry commented Dec 29, 2016 via email

@friism friism assigned friism and simonferquel and unassigned friism Jan 4, 2017
@friism
Copy link

friism commented Jan 4, 2017

@simonferquel do you have time to look at @medhatelmasry dump?

@simonferquel
Copy link

@medhatelmasry I see that you are using an insider preview of Windows. Unfortunately in latest build there seem to have a bug with Samba sharing preventing drive sharing with the linux VM to work.

We don't have any workaround for now (except reverting to Windows 14393)

@medhatelmasry
Copy link
Author

medhatelmasry commented Jan 5, 2017 via email

@denisvmedia
Copy link

denisvmedia commented Jan 11, 2017

@simonferquel, I don't think there is a bug in Windows. It used to work for me (and still works on another PC with the most recent insider release), but then I had to reset the settings of Docker, after that it stopped working.

@simonferquel
Copy link

@denisvmedia there was a bug before 15002 with remote access in general (not only Samba File sharing, but also with RDP). I don't know if it did hit everyone though and I suppose Microsoft fixed that in 15002.

@denisvmedia
Copy link

denisvmedia commented Jan 11, 2017

@simonferquel unfortunately, I don't know, but what really surprises me that this stopped working only after I did the reset in Docker. So even if there is a bug in Windows, there must be a workaround - otherwise how could it work before? (and still works on another PC) I'd be happy to find it... If I can help anyhow, I'm open for that, because currently my work is completely stopped due to this issue :(

Update: As of RDP - it works for me right now - I'm writing this from an external network on my Desktop through RDP.

@denisvmedia
Copy link

I solved it! Now it works again. I found a comment of @gorbunovav in #114, it worked for me:

Try to share the drive manually in Windows and check, that you can access

\10.0.75.1[Drive Letter]

If it doesn't work - check, that file sharing is enabled for the docker interface location (Public network by default) and try to remove, then add back 'File and Printer Sharing for MS Networks' in 'vEthernet (DockerNAT)' network adapter's properties.

(I've also moved interface to the 'Private network' segment:

Set-NetConnectionProfile -InterfaceAlias "vEthernet (DockerNAT)" -NetworkCategory Private

in the PowerShell)

@cmurczek
Copy link

I see this issue in Win10 Insider build 15007. Just submitted feedback to MS about this since it had been fixed in a prev. (way older, might have been 14393) Insider build. Currently updating to 15014.

@cmurczek
Copy link

Volume mapping is working again in Win10 Insider build 15014.

@phillipsharring
Copy link

@johnrb2 - did you ever figure this out with Cisco VPN? My team are all using a docker container for development and it's made WFH really annoying. Thoughts? Thanks, Phillip

@phillipsharring
Copy link

phillipsharring commented Jan 26, 2017

Markdown seems to have eaten the solution @denisvmedia posted. In a file explorer, go to: \\10.0.75.1\C

@johnrb2
Copy link

johnrb2 commented Jan 26, 2017

@philsown yeah I just had to change the address in network settings to 192.168.x.x since the VPN was already using the 10.0 ones.

@johnrb2
Copy link

johnrb2 commented Jan 26, 2017

@philsown there is another thread regarding the Cisco VPN that my solution didn't work for @sugun999 he or she could use some help.

@johnrb2
Copy link

johnrb2 commented Jan 26, 2017

On issue #360

@absalan
Copy link

absalan commented Feb 18, 2017

I had same issue and I just solved it.
My internet security software was blocking file and printer sharing. If you do too, Just right click on the drive that you want to share with docker in file explorer and click on Sharing tap. Than click on advanced sharing. On that popup check the "Share this folder" checkbox and click ok. If your security software warned you just click on it and enable file sharing on it and click ok. Now if you go to docker settings and share the drive, it will work.

@sthuber90
Copy link

@absalan When I share my C: drive manually thorugh the advanced sharing settings and then try to activate in the docker settings, I get the notification that firewall is blocking, which it is not (#466) and after that the C: drive is not shared anymore.

@rn
Copy link
Contributor

rn commented Feb 18, 2017

@sthuber90 that's interesting. If you don't enable sharing in the Advanced Settings does it work? Also, how do you enable it? There are several options in the menu. Could you maybe share a screenshot?
thanks

@absalan
Copy link

absalan commented Feb 19, 2017

@sthuber90 Try to share another drive. windows does have some policy for windows drive and that's why it's preventing you from sharing drive C.

@sthuber90
Copy link

@absalan The computer is work on is a corporate one and only has a C drive, otherwise I would have tested sharing an other drive.

@rneugeba
GIF showing firewall and C drive sharing error

[08:31:05.005][SharedDrivesSettings][Info   ] Apply shared drive settings
[08:31:05.007][NamedPipeClient][Info   ] Sending Mount(C, DOMAIN\USER:**********, Docker.Core.Settings)...
[08:31:06.008][NamedPipeServer][Info   ] Mount(C, DOMAIN\USER:**********, Docker.Core.Settings)
[08:31:06.008][SambaShare     ][Info   ] Mount C
[08:31:06.048][Cmd            ][Info   ] Share name        C
[08:31:06.048][Cmd            ][Info   ] Path              C:\
[08:31:06.048][Cmd            ][Info   ] Remark            
[08:31:06.048][Cmd            ][Info   ] Maximum users     No limit
[08:31:06.050][Cmd            ][Info   ] Users             
[08:31:06.050][Cmd            ][Info   ] Caching           Manual caching of documents
[08:31:06.050][Cmd            ][Info   ] Permission        Everyone, FULL
[08:31:06.050][Cmd            ][Info   ] 
[08:31:06.050][Cmd            ][Info   ] The command completed successfully.
[08:31:06.050][Cmd            ][Info   ] 
[08:31:06.054][SambaShare     ][Info   ] "C" is shared
[08:31:06.108][SambaShare     ][Info   ] Username: USER
[08:31:06.108][SambaShare     ][Info   ] Host IP: 10.0.75.1
[08:31:07.830][ApiProxy       ][Info   ] proxy << POST /v1.26/containers/be1e37c16a936806e798b7d3ecd17d2a39c3a4f596a98341e17cc05748c5da42/attach?stderr=1&stdin=1&stdout=1&stream=1
[08:31:08.187][ApiProxy       ][Info   ] Cancel connection...
[08:31:08.191][SambaShare     ][Error  ] Unable to mount C drive: firewall is blocking
[08:31:08.191][SambaShare     ][Info   ] Removing share C

Even though it says that the firwall is blocking this cannot be the case, as mentioned here.

@cmurczek
Copy link

This has got nothing to do with suspected policies for the C drive. I just tried to share D and got the same results:
[10:54:49.631][NamedPipeClient][Info ] Sending GetDefaultVhdxPath()... [10:54:50.636][NamedPipeServer][Info ] GetDefaultVhdxPath() [10:54:51.643][NamedPipeClient][Info ] Received response for GetDefaultVhdxPath [10:54:51.642][NamedPipeServer][Info ] GetDefaultVhdxPath done in 00:00:01.0057637. [10:54:53.485][SharedDrivesSettings][Info ] Apply shared drive settings [10:54:53.486][NamedPipeClient][Info ] Sending Unmount(C, Docker.Core.Settings)... [10:54:53.487][NamedPipeServer][Info ] Unmount(C, Docker.Core.Settings) [10:54:53.487][SambaShare ][Info ] Unmount C [10:54:53.652][ApiProxy ][Info ] proxy >> GET /_ping [10:54:53.652][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:53.656][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:53.660][ApiProxy ][Info ] proxy << GET /_ping [10:54:53.663][ApiProxy ][Info ] proxy >> POST /v1.26/images/load?quiet=1 [10:54:53.663][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:53.666][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:53.924][ApiProxy ][Info ] proxy << POST /v1.26/images/load?quiet=1 [10:54:54.104][ApiProxy ][Info ] proxy >> GET /_ping [10:54:54.104][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.111][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.126][ApiProxy ][Info ] proxy << GET /_ping [10:54:54.145][ApiProxy ][Info ] proxy >> POST /v1.26/containers/create [rewriteBinds] [10:54:54.172][ApiProxy ][Info ] Failed to Walk to [snapshots f483c5cc239a2903863cbc3ee314daa95d60a1ee ro com.docker.driver.amd64-linux proxy http] 9p: No such file or directory [10:54:54.176][ApiProxy ][Info ] Failed to read proxies/http from snaphshot p9p.MessageRerror{Ename:"No such file or directory"} [10:54:54.176][ApiProxy ][Info ] proxy >> POST /v1.26/containers/create [10:54:54.176][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.180][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.353][ApiProxy ][Info ] proxy << POST /v1.26/containers/create [10:54:54.368][ApiProxy ][Info ] proxy >> POST /v1.26/containers/d18518d66c7d9c0bc61af40b892fe13b1768d34201d8310da310becd806d213b/attach?stderr=1&stdout=1&stream=1 [10:54:54.368][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.370][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.372][ApiProxy ][Info ] Upgrading to raw stream [10:54:54.375][ApiProxy ][Info ] proxy >> GET /v1.26/events?filters=%7B%22container%22%3A%7B%22d18518d66c7d9c0bc61af40b892fe13b1768d34201d8310da310becd806d213b%22%3Atrue%7D%2C%22type%22%3A%7B%22container%22%3Atrue%7D%7D [10:54:54.375][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.376][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.380][ApiProxy ][Info ] proxy >> POST /v1.26/containers/d18518d66c7d9c0bc61af40b892fe13b1768d34201d8310da310becd806d213b/start [start] [10:54:54.380][ApiProxy ][Info ] proxy >> POST /v1.26/containers/d18518d66c7d9c0bc61af40b892fe13b1768d34201d8310da310becd806d213b/start [10:54:54.380][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.381][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:54.772][ApiProxy ][Info ] proxy << POST /v1.26/containers/d18518d66c7d9c0bc61af40b892fe13b1768d34201d8310da310becd806d213b/start [10:54:55.323][NamedPipeClient][Info ] Received response for Unmount [10:54:55.308][NamedPipeServer][Info ] Unmount done in 00:00:01.8214994. [10:54:55.338][NamedPipeClient][Info ] Sending Mount(D, ***@***:**********, Docker.Core.Settings)... [10:54:55.322][ApiProxy ][Info ] proxy << POST /v1.26/containers/d18518d66c7d9c0bc61af40b892fe13b1768d34201d8310da310becd806d213b/attach?stderr=1&stdout=1&stream=1 [10:54:55.322][ApiProxy ][Info ] Cancel connection... [10:54:55.323][ApiProxy ][Info ] proxy << GET /v1.26/events?filters=%7B%22container%22%3A%7B%22d18518d66c7d9c0bc61af40b892fe13b1768d34201d8310da310becd806d213b%22%3Atrue%7D%2C%22type%22%3A%7B%22container%22%3Atrue%7D%7D [10:54:55.996][NamedPipeServer][Info ] Mount(D, ***@***:**********, Docker.Core.Settings) [10:54:55.996][SambaShare ][Info ] Mount D [10:54:56.056][Cmd ][Info ] This shared resource does not exist. [10:54:56.056][Cmd ][Info ] [10:54:56.056][Cmd ][Info ] More help is available by typing NET HELPMSG 2310. [10:54:56.056][Cmd ][Info ] [10:54:56.056][SambaShare ][Info ] "D" is not shared [10:54:56.057][SambaShare ][Info ] Creating share "D:\" as "D" with Full Control to "[email protected]" [10:54:56.190][Cmd ][Info ] D was shared successfully. [10:54:56.190][Cmd ][Info ] [10:54:56.267][Cmd ][Info ] Share name D [10:54:56.267][Cmd ][Info ] Path D:\ [10:54:56.267][Cmd ][Info ] Remark [10:54:56.267][Cmd ][Info ] Maximum users No limit [10:54:56.268][Cmd ][Info ] Users [10:54:56.269][Cmd ][Info ] Caching Caching disabled [10:54:56.270][Cmd ][Info ] Permission ***\***, FULL [10:54:56.270][Cmd ][Info ] [10:54:56.270][Cmd ][Info ] The command completed successfully. [10:54:56.270][Cmd ][Info ] [10:54:56.285][SambaShare ][Info ] "D" is shared [10:54:56.398][SambaShare ][Info ] Username: *** [10:54:56.401][SambaShare ][Info ] Host IP: 10.0.75.1 [10:54:56.401][SambaShare ][Info ] Cifs options: noperm,iocharset=utf8,nobrl,mfsymlinks,vers=3.02,domain=SURFACE-CMU [10:54:56.525][ApiProxy ][Info ] proxy >> GET /_ping [10:54:56.526][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:56.527][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:56.532][ApiProxy ][Info ] proxy << GET /_ping [10:54:56.535][ApiProxy ][Info ] proxy >> POST /v1.26/images/load?quiet=1 [10:54:56.535][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:56.536][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:56.703][ApiProxy ][Info ] proxy << POST /v1.26/images/load?quiet=1 [10:54:56.847][ApiProxy ][Info ] proxy >> GET /_ping [10:54:56.847][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:56.848][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:56.851][ApiProxy ][Info ] proxy << GET /_ping [10:54:56.859][ApiProxy ][Info ] proxy >> POST /v1.26/containers/create [rewriteBinds] [10:54:56.876][ApiProxy ][Info ] Failed to Walk to [snapshots f483c5cc239a2903863cbc3ee314daa95d60a1ee ro com.docker.driver.amd64-linux proxy http] 9p: No such file or directory [10:54:56.879][ApiProxy ][Info ] Failed to read proxies/http from snaphshot p9p.MessageRerror{Ename:"No such file or directory"} [10:54:56.879][ApiProxy ][Info ] proxy >> POST /v1.26/containers/create [10:54:56.879][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:56.882][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:57.063][ApiProxy ][Info ] proxy << POST /v1.26/containers/create [10:54:57.080][ApiProxy ][Info ] proxy >> POST /v1.26/containers/a58989958bb9d51572e93a2617c7eb56c45faf14ae9e38495af5d37f265f6803/attach?stderr=1&stdin=1&stdout=1&stream=1 [10:54:57.080][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:57.081][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:57.083][ApiProxy ][Info ] Upgrading to raw stream [10:54:57.085][ApiProxy ][Info ] proxy >> GET /v1.26/events?filters=%7B%22container%22%3A%7B%22a58989958bb9d51572e93a2617c7eb56c45faf14ae9e38495af5d37f265f6803%22%3Atrue%7D%2C%22type%22%3A%7B%22container%22%3Atrue%7D%7D [10:54:57.085][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:57.086][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:57.088][ApiProxy ][Info ] proxy >> POST /v1.26/containers/a58989958bb9d51572e93a2617c7eb56c45faf14ae9e38495af5d37f265f6803/start [start] [10:54:57.088][ApiProxy ][Info ] proxy >> POST /v1.26/containers/a58989958bb9d51572e93a2617c7eb56c45faf14ae9e38495af5d37f265f6803/start [10:54:57.088][ApiProxy ][Info ] Dial Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:57.089][ApiProxy ][Info ] Successfully dialed Hyper-V socket 00c5797d-99af-4ba5-abbf-702f0b4c71e7:23a432c2-537a-4291-bcb5-d62504644739 [10:54:57.598][ApiProxy ][Info ] proxy << POST /v1.26/containers/a58989958bb9d51572e93a2617c7eb56c45faf14ae9e38495af5d37f265f6803/start [10:54:58.692][ApiProxy ][Info ] proxy << POST /v1.26/containers/a58989958bb9d51572e93a2617c7eb56c45faf14ae9e38495af5d37f265f6803/attach?stderr=1&stdin=1&stdout=1&stream=1 [10:54:59.116][ApiProxy ][Info ] Cancel connection... [10:54:59.125][ApiProxy ][Info ] proxy << GET /v1.26/events?filters=%7B%22container%22%3A%7B%22a58989958bb9d51572e93a2617c7eb56c45faf14ae9e38495af5d37f265f6803%22%3Atrue%7D%2C%22type%22%3A%7B%22container%22%3Atrue%7D%7D [10:54:59.118][SambaShare ][Error ] Unable to mount D drive: firewall is blocking [10:54:59.125][SambaShare ][Info ] Removing share D [10:54:59.185][NamedPipeClient][Info ] Received response for Mount [10:54:59.183][NamedPipeServer][Info ] Mount done in 00:00:03.1876468. [10:55:00.946][NamedPipeClient][Info ] Sending GetDefaultVhdxPath()... [10:55:00.973][NamedPipeClient][Info ] Received response for GetDefaultVhdxPath [10:55:00.956][NamedPipeServer][Info ] GetDefaultVhdxPath() [10:55:00.959][NamedPipeServer][Info ] GetDefaultVhdxPath done in 00:00:00.0030104.

@mickext
Copy link

mickext commented Sep 6, 2017

This problem can be happen If you are using Windows 10 Enterprise.

The Group Policy in System Center / Active Directory can blocking the port 445. The System Administrator needs permit this port to your user/ip.

Releasing the door in Windows Firewall Local does not make effect.

@Kounavi
Copy link

Kounavi commented Sep 20, 2017

@simonferquel What can I say? :) Back then I was using Divio's app but days have come and gone by and I'm using docker compose now when I have to resort to docker which I find much better and much more flexible for my workflow and usage cases (at least for me). Also, without that workaround I couldn't use docker in any way so it was a necessary evil (but can't recall the details since it's been a long time).

@apodznoev
Copy link

apodznoev commented Sep 27, 2017

I've read all this and a couple of other topics and tried everything written there. The only thing that finally worked for me was switch to Docker Edge version:

Client:
Version: 17.09.0-ce-rc3
API version: 1.32
Go version: go1.8.3
Git commit: 2357fb2
Built: Thu Sep 21 02:31:16 2017
OS/Arch: windows/amd64

Server:
Version: 17.09.0-ce-rc3
API version: 1.32 (minimum version 1.12)
Go version: go1.8.3
Git commit: 2357fb2
Built: Thu Sep 21 02:36:52 2017
OS/Arch: linux/amd64
Experimental: true

@command0r
Copy link

command0r commented Oct 9, 2017

Sounds weird, but the solution offered by @juhap worked for me. Seems more like a Windows 10 glitch that has nothing to do with Docker.

@rn
Copy link
Contributor

rn commented Mar 8, 2018

cleaning/closing old issues.

@rn rn closed this as completed Mar 8, 2018
@avindra
Copy link

avindra commented Apr 11, 2018

People having this issue with Cisco's VPN software... did you come up with any workarounds?

Seems that the only way for corporate users to work from home is to give up the VPN :/

@JoshSchreuder
Copy link

I had two firewall rules in Windows Firewall

rules

No idea where these came from, but disabling them allowed me to share the drive. Hope this helps someone.

@joegrasse
Copy link

@avindra To get docker to work with a Cisco VPN, I had to go into Docker -> Settings -> Network and change the Internal Virtual Switch settings.

For Example:
Subnet Address: 192.168.65.0
Subnet Mask: 255.255.255.0

@ralberts
Copy link

The Cisco VPN policy settings blocked any local traffic - it basically sends it all through the VPN - though I switched over to OpenConnect and it allows local traffic which allowed docker to work for me. Hope this helps someone.

@radekbaranowski
Copy link

Does it have anything to do with severe restriction (and complete default removal) on using SMB v.1.0 which is regarded ATM as highly vulnerable, thus deprecated and disabled by default in newest Win10 updates? Struggled with this when lost connection to my local NAS, maybe that's just another chapter of the same story?

@efunkenbusch
Copy link

In my case, the problem appears to be that our domain policy forces the firewall to be enabled on the Private and Public profiles (disables it for the DomainAuthenticated profile). Even though I have the proper ports enabled on those profiles, it still is blocked. Turning off the Firewall service allows the drives to be mapped, so it's definitely a firewall/security policy issue.

I can reach port 445 on the Docker interface (I've remapped to 192.168.0.1 because our network uses the 10.* network).

I'm running Windows 10 1803, which of course has the issue where you cannot uninstall file and printer sharing. So that workaround is not possible.

@mariusjp
Copy link

mariusjp commented Jan 7, 2019

I had two firewall rules in Windows Firewall

rules

No idea where these came from, but disabling them allowed me to share the drive. Hope this helps someone.

You are a lifesaver! I tried EVERYTHING mentioned EVERYWHERE on the internet. And these stupid 2 rules blocked me. Thx for the find!

@duc-anh-tran
Copy link

For anyone with Cisco VPN issue, follow this guide: #360 (comment)
Finally worked out for me.

@germanamv
Copy link

Norton smart firewall was the problem for me. Worked fine after disabling it.

@DashAce10
Copy link

Disabling this setting worked for me.

2019-07-02 20_28_04-Windows Defender Firewall with Advanced Security

@LU4E
Copy link

LU4E commented Jul 24, 2019

check if there is a forbid rules for 445.
mine is forbid rules for bitcoin which forbid 445.

@GZFrankPeng
Copy link

Disabling this setting worked for me.

2019-07-02 20_28_04-Windows Defender Firewall with Advanced Security

I found this, and re-review my the Windows Firewall Settings, and do find a rule which is blocked the 445 port, I enable it, and now it works. Thanks @DashAce10 ! I've spent a lot of time on the issue before it is settled. Beautiful! So I do suggest you to check your Firewall Rules carefully around the port 445. Wish you good luck!

@mara8008
Copy link

In my case, Nothing worked with the given suggestions.
I did following steps to solve this problem as i am on VPN(I am using Check point EndPoint Security).
1)Uninstalled the docker completely from system. Clean uninstall.
2)Install the docker with Admin Privileges while i am on VPN.
3)Once the docker up and running, Share the drive and it will work as usual.

Please make sure you do clean Uninstall as mentioned in first step even from system registries.

@gabeluci
Copy link

@mara8008 A reboot should be enough when Check Point is misbehaving. I've had problems in the past with it enforcing firewall rules even when I'm not connected anymore, even after shutting down the Check Point service (because it uses a driver-based firewall). So the only way to reset those rules is to reboot.

@appsparkler
Copy link

appsparkler commented Oct 26, 2019

This is what worked for me on Windows 10:

Type Turn Windows Feature On Or Off and check the checkbox for File Sharing. Restart the system.

image

Good Luck...

@tolgabalci
Copy link

Thank you @efunkenbusch! I tried over a dozen different things and none of them worked, but changing Docker => Settings => Network => Subnet Address to 192.168.0.0 worked! (My company also uses 10...* for internal addresses)

@docker-robott
Copy link
Collaborator

Closed issues are locked after 30 days of inactivity.
This helps our team focus on active issues.

If you have found a problem that seems similar to this, please open a new issue.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle locked

@docker docker locked and limited conversation to collaborators Jun 19, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests