*********** SYSTEM *****************

Windows XP Professional, SP1

Computer A - 192.168.2.100 Subnet 255.255.255.0
Computer B - 192.168.2.101 Subnet 255.255.255.0

Both computers are connected to a NAT router which connects to the Internet.
The NAT uses a single static IP address at my ISP for the gateway out to the
Internet.

Disabled NetBIOS over TCP/IP for both computers.
This was done for security reasons.

*********** PROBLEM *****************

Problem: Cannot network two Windows XP Pro computers via IP

I tell MAP Network Drive to use Z: to \\192.168.2.100\C
where C is network shared.

MAP Network Drive says it "cannot find network path for
Z: to \\192.168.2.100\C"

I can ping both machines using their IP addresses.

What is really strange is that sometimes when I boot both
systems they do map and it works. But for some reason
they refuse to map now.

Any feedback would be appreciated. Thanks

Forget the mapping until you have established a network.
Have you run the XP network wizard on both machines?
Do you have the same workgroup name on both and different computer names.
Check in network places - view workgroup computers.
You should see each computer.

Then go for the mapping of drives.


"joe" <(E-Mail Removed)> wrote in message
news:Lg1td.2730$(E-Mail Removed)...
>
> *********** SYSTEM *****************
>
> Windows XP Professional, SP1
>
> Computer A - 192.168.2.100 Subnet 255.255.255.0
> Computer B - 192.168.2.101 Subnet 255.255.255.0
>
> Both computers are connected to a NAT router which connects to the
> Internet.
> The NAT uses a single static IP address at my ISP for the gateway out to
> the
> Internet.
>
> Disabled NetBIOS over TCP/IP for both computers.
> This was done for security reasons.
>
> *********** PROBLEM *****************
>
> Problem: Cannot network two Windows XP Pro computers via IP
>
> I tell MAP Network Drive to use Z: to \\192.168.2.100\C
> where C is network shared.
>
> MAP Network Drive says it "cannot find network path for
> Z: to \\192.168.2.100\C"
>
> I can ping both machines using their IP addresses.
>
> What is really strange is that sometimes when I boot both
> systems they do map and it works. But for some reason
> they refuse to map now.
>
> Any feedback would be appreciated. Thanks
>
>

In order to use UNC paths(\\192.168.2.100\C) you have to have File &
Print sharing installed. This is a security risk if you are not behind
a firewall.

File & Print sharing is installed.
The NAT router is a fire wall.
Zone Alarm is off while trying to find problem.
Disabled NetBIOS over TCP/IP for both computers.
This was done for security reasons since hackers like
to get through firewalls via NetBIOS ports.
This is why I use \\192.168.2.100\C rather than say
\\MyComputer\C
Computers have different names.
Both have same workgroup name.

When I booted both systems this afternoon they were
able to network. I have no idea why they sometimes
network and other times they don't see each other.
I assume there is some network cache that needs to get
flushed, but I don't know what to flush.

Thank you for your feedback.

On Tue, 07 Dec 2004 05:59:18 GMT, "joe"
<(E-Mail Removed)> wrote:

>Zone Alarm is off while trying to find problem.

Very high up on the list of things to try is uninstalling zonealarm
completely until the problem is resolved.

There are uninstallation instructions somewhere on the zonelabs
website.


Jim.

The only way a UNC path will work is if you have NetBOIS and File &
Print sharing enabled. UNC paths(\192.168.2.100\C or \\MyMachine\C)
uses NetBOIS protocol to communicate.

On 7 Dec 2004 06:27:58 -0800, "BravesCharm" <(E-Mail Removed)>
wrote:

>The only way a UNC path will work is if you have NetBOIS and File &
>Print sharing enabled. UNC paths(\192.168.2.100\C or \\MyMachine\C)
>uses NetBOIS protocol to communicate.

No. These machines are xp pro so netbios is not required unless
browsing is required, which it isn't.


Jim.

It is important to note that I have
"Disabled NetBIOS over TCP/IP for both computers"
in the TCP/IP properties.

Therefore, if I type
nbtstat -c or
nbtstat -n
It says there are "no names in cache"
so there does not appear to be a Master Browser.

In theory, a MAP Network Drive of Z: to \\192.168.2.100\C
should directly find the IP address without requiring
a Master Browser. What is strange is sometimes it works
and other times it does not.

Thank you for your feedback.

Why don't you simply block port 135, 137, 138, 139 and 443 traffic to and
from the Internet but allow it on your LAN. Basic stuff surely. First rule -
allow those ports on LAN subnet. Second rule - block those ports to and from
everything. Rules are processed in order.

--
Ross
"joe" <(E-Mail Removed)> wrote in message
news:WEbtd.3395$(E-Mail Removed)...
> File & Print sharing is installed.
> The NAT router is a fire wall.
> Zone Alarm is off while trying to find problem.
> Disabled NetBIOS over TCP/IP for both computers.
> This was done for security reasons since hackers like
> to get through firewalls via NetBIOS ports.
> This is why I use \\192.168.2.100\C rather than say
> \\MyComputer\C
> Computers have different names.
> Both have same workgroup name.
>
> When I booted both systems this afternoon they were
> able to network. I have no idea why they sometimes
> network and other times they don't see each other.
> I assume there is some network cache that needs to get
> flushed, but I don't know what to flush.
>
> Thank you for your feedback.
>
>

On Sat, 11 Dec 2004 22:52:01 +1300, "Ross Durie"
<(E-Mail Removed)> wrote:

>Why don't you simply block port 135, 137, 138, 139 and 443 traffic to and
>from the Internet but allow it on your LAN. Basic stuff surely. First rule -
>allow those ports on LAN subnet. Second rule - block those ports to and from
>everything. Rules are processed in order.

Perhaps you can explain how it's simply a firewall rules problem when
it connects okay intermittently.

Jim.